CVE-2026-0177: Medium severity vulnerability
Published Sep 15, 2026
·Updated
In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Exploitation requires local access and high privileges, specifically System execution privileges. No user interaction is required.
2
What is the expected impact if exploitation succeeds?
The issue may allow local disclosure of information through an out-of-bounds read. The provided CVSS vector does not indicate integrity or availability impact.