CVE-2025-67897
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Dec 14, 2025
CISA due date
—
The record
In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | sequoia-openpgp | 0 | 2.1.0 |
| crates.io | sequoia-openpgp | 0.0.0-0 | 2.1.0 |
| Chainguard | rpm-sequoia | 0 | 1.10.0-r1 |
| Wolfi | rpm-sequoia | 0 | 1.10.0-r1 |
Related vulnerabilities
- RUSTSEC-2025-0136 Underflow in aes_key_unwrap function Same vulnerability
- CVE-2026-77406 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-195
- CVE-2026-18444 There is an integer conversion vulnerability resulting in an out-of-bounds read when… CWE-195
- CVE-2026-62959 Coturn is a free open source implementation of TURN and STUN Server. CWE-195
- CVE-2026-55991 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client… CWE-195
- CVE-2026-49840 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-195
- CVE-2026-41682 pupnp is an SDK for development of UPnP device and control point applications. CWE-195
- CVE-2026-26981 OpenEXR provides the specification and reference implementation of the EXR file format… CWE-195