CVE-2026-53938 | OpenIDC cjose 0.6.2.2 JWE Decryption cjose_jwe_import/cjose_jwe_decrypt encrypted_key heap-based overflow (Nessus ID 346044)

A vulnerability identified as critical has been detected in OpenIDC cjose 0.6.2.2. Affected is the function cjose_jwe_import/cjose_jwe_decrypt of the component JWE Decryption. This manipulation of the argument encrypted_key causes heap-based buffer overflow. This vulnerability is tracked as CVE-2026-53938. The attack is possible to be carried out... Weiterlesen