CVE-2026-32849: NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing u...

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit mutable per-operation state embedded in the csession struct to …

NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing undefined behavior when cop->dst_len exceeds INT_MAX. A local attacker with access to /dev/crypto and …

マルチチェーンのセルフホスト型ウォレットである TokenPocket は、ワンストップの法定通貨入出金ソリューションである OpenCrypto を通じて、Web3 プロジェクト向けに設計された Binance の法定通貨から仮想通貨への取引統合ツールである Binance Connect と提携したことを発表しました。暗号資産の取得プロセスを簡素化し、ユーザーエクスペリエンスを向上させ、プラッ...

Hi, I tried to replace opencrypto/xform_aes_cbc.c with xfrom_sm4_cbc to use the sm4_cbc algorithm in ipsec. It can encrypt successfully but will report an error when decrypting. Why is this?