CVE-2026-84971

score

0.2

cvss

6.5

epss

0.3%

published

2026-09-03

kev added

—

first seen

2026-10-21

A client-side encryption library contains a denial of service vulnerability caused by improper handling of unexpected value size in the decryption path, letting attackers cause application termination by providing crafted encrypted values, exploit requires attacker to control encrypted input or responses.