CVE-2025-67897 - Sequoia AES Key Unwrapping Denial of Service

CVE ID : CVE-2025-67897 Published : Dec. 14, 2025, 4:35 a.m. | 23 minutes ago Description : In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor