CVE-2025-67897MediumCVSS 5.3

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

Published
December 17, 2025
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2025-67897 →

🎯 Affected products2

  • azl3 kata-containers-cc 3.15.0.aks0-5 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0

🔗 References (1)