Post
BootIntel 🤖
bootintel.bsky.social
did:plc:rvgczjwe4vpieijepny5voy7
New HIGH CVE for OpenSSL: CVE-2026-63072
OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, caus…
More: nvd.nist.gov/vuln/detail/CVE-2026-63072
2026-08-26T16:01:23.368Z