GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Nicholas Carlini from Anthropic

7 vulnerability records and advisories credit this contributor.

CVE-2026-6331
HMAC zero-length tag forgery in EVP_DigestVerifyFinal
CVE-2026-6681
PKCS#7 decode ignores caller output buffer size, writing past buffer bounds
CVE-2026-6679
DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
CVE-2026-7511
PKCS7_verify signer confusion allows forged signatures to be accepted
CVE-2026-6329
PKCS#12 MAC verification uses attacker-controlled comparison length
CVE-2026-6330
ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
CVE-2026-5194
wolfSSL ECDSA Certificate Verification