{"id":"CVE-2026-32849","summary":"NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c","details":"NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop-\u003edst_len value, causing undefined behavior when cop-\u003edst_len exceeds INT_MAX. A local attacker with access to /dev/crypto and a compression session type can exploit this vulnerability by providing a dst_len value exceeding INT_MAX to trigger a kernel panic through NULL pointer dereference when CONFIG_SVS is disabled and corrupted UIO pointer arithmetic.","modified":"2026-08-12T16:25:19.666402Z","published":"2026-05-18T17:42:29.642Z","database_specific":{"cwe_ids":["CWE-190","CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32849.json","unresolved_ranges":[{"extracted_events":[{"fixed":"ec8451efc1565516aba9e7047e1a1a1ce7953a2f"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32849.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32849"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/netbsd-signed-integer-overflow-in-cryptodev-op-via-cryptodev-c"},{"type":"FIX","url":"https://github.com/NetBSD/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f"},{"type":"PACKAGE","url":"https://github.com/NetBSD/src"},{"type":"EVIDENCE","url":"https://nasm.re/posts/uaf_netbsd_crypto/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/netbsd/src","events":[{"introduced":"0"},{"fixed":"ec8451efc1565516aba9e7047e1a1a1ce7953a2f"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32849.json","vanir_signatures_modified":"2026-08-12T16:25:19Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.h"},"deprecated":false,"digest":{"line_hashes":["24147922906549193257480505324165689865","304842455177201927547544297094294233335","126513580658098728724074044680534720424","117517299640921963171659559007044743931","10138946559610841423677760687627512396","304842455177201927547544297094294233335","126513580658098728724074044680534720424","117517299640921963171659559007044743931","117183584819035190493241480939666856428","293916289728664952883380022636135932115","17154792284949162331439973251618441220","225955557074069186100682050661239509386","33001801466745862285499267325331645023","66911419912565594615573042297380249519","69270201929156430523700655370360185333","318353453122649475196141968586504466720","19852757407280159855953026686324745374","293916289728664952883380022636135932115","248921060906619753673714402690094880047","37332299705842552154401965418284297326","139961684152790352904736329176713587286","66911419912565594615573042297380249519","69270201929156430523700655370360185333","62775627049565218039374769181861100567","97154822792774046611492552057568589295","76392122624839286521875134051060324185","89992684689030160943915937498924296652","121473693748397708996851772324950082806","220486999430523316496375147212322957943","288150698195260087226515777068774123785","225571902815473817902682117917241907904","299847089109576028448621775817696621661","205229830017204942148565117124630371969","85854007419192466001037516691646225358","125799799136621272287224268488215035877","316606579591021536747088971495579112637","298800892728028553031796877618091084541","65855690065469058361434091889828258211","120726423930692580570273874399473938291","299847089109576028448621775817696621661","178505621815708170150974437194262284246","254817559545746558447565777749526638609","36161258442358657860908087982466238378","303144838381550877998120402177471899167","23451486961712103758207966040850022274","128617947224619580546957821921034614723","147620372029128406508978323376269297424","65035691522280191609443355329369916224","321295822132173197103680180600989801646","117490398224207877909309594298705894117","312183370462973596079258239850469062609","244596374033735547310799870093514543399","252555139985845609212457320501135156984","161005919622495079237260388577287203503","2530901186627152144018009444638134524","306753700551654379690751570358389517838","68806063983896541690509634799522186025","150290979243635477652976996122649922165","83347513686228246446139242897653437009","150611202039256848032744289781329779237","161116802720639034528153677589033978452","83448281534630211987589498672859761531","251366936989112097988511673973507784131","174302144600377517859017342091665310529","152564379502447511660959831645227949319","120544790995472284348884557194801649133","119379245465998060608177263335419143367","317474503772128257388951709383943551084","318251619734110809403920776171464641560","213505295879084866223510589105107077685","5295677043695525410747981904316750726","461593400614020039045716778676531129","314172193978814969521179809475554204458","348641977992936075915608922832314834","163246658671579798088715431103424978825","100036793162736711816945013364669980770","294113344108552483885266810682908977473","334335134493347791951830654050381148053","48173236507387888695471291241814696234"],"threshold":0.9},"id":"CVE-2026-32849-066a8ec4"},{"target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptoopen"},"deprecated":false,"digest":{"function_hash":"153167222459498040361213151718798169541","length":674},"id":"CVE-2026-32849-099224cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f"},{"id":"CVE-2026-32849-0aec4559","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"function":"cryptof_stat","file":"sys/opencrypto/cryptodev.c"},"deprecated":false,"digest":{"function_hash":"126944217336288615579432820907459354170","length":541}},{"digest":{"function_hash":"160305790426354080930736156669244934313","length":3062},"id":"CVE-2026-32849-0eff8f71","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_getmstatus"},"deprecated":false},{"id":"CVE-2026-32849-24acee1a","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_mcb"},"deprecated":false,"digest":{"function_hash":"174870227787527730932587729874996903521","length":289}},{"deprecated":false,"digest":{"function_hash":"157077640326546644536143400203672123813","length":253},"id":"CVE-2026-32849-2750f437","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_cb"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/ocryptodev.c"},"deprecated":false,"digest":{"line_hashes":["40149865641454089633716945076023984177","119335015863137068394526617985942509536","282165591520651157560314329032559054641","162620003110346159189689816111581084886","54841320454004835891545646989786732741","171214128518094803671865487717049306544","172735366204338919410470531501964927636","255093936897382559765586758690188720650","177645606241302517303523290475647273289","287041788687315683491876624668207460419","88239630213342914295453486422980921205","136330765521499979460859256495628551569","33601074072737909126018420650618152234","78801085202266267950010628443853430242"],"threshold":0.9},"id":"CVE-2026-32849-29ffcebc"},{"digest":{"line_hashes":["36511204091044262154795250316154674113","253852434558380738863812684352654642061","104262378839187365915847895526782192613","188079012593552038817188271643836428727","330762398468799307307578991087603302385","173368213844565376546997587635928175045"],"threshold":0.9},"id":"CVE-2026-32849-3970c140","signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/deflate.c"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/ocryptodev.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["245334549087297088036500486272228282147","293916289728664952883380022636135932115","17154792284949162331439973251618441220","225955557074069186100682050661239509386","33001801466745862285499267325331645023","293916289728664952883380022636135932115","248921060906619753673714402690094880047","37332299705842552154401965418284297326","139961684152790352904736329176713587286"]},"id":"CVE-2026-32849-3dd58278"},{"deprecated":false,"digest":{"function_hash":"322530140632879336024145538029045934420","length":5156},"id":"CVE-2026-32849-3f5b025e","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptof_ioctl"}},{"source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"csefree"},"deprecated":false,"digest":{"function_hash":"173164813996132642020024332284906342897","length":224},"id":"CVE-2026-32849-4faaddec","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"113254126636603714883787625805747696785","length":251},"id":"CVE-2026-32849-5bba386f","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodevkey_mcb"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"292498206121967296908224995921882229853","length":2308},"id":"CVE-2026-32849-5cf7f9db","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_getstatus"}},{"target":{"file":"sys/opencrypto/cryptodev_internal.h"},"deprecated":false,"digest":{"line_hashes":["330850565924598851740594834143668797397","212921417394064377279441901127470445508","289706173131311025879575723960351483936","143192506399122240866089287342900358556"],"threshold":0.9},"id":"CVE-2026-32849-5ebc9cb0","signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f"},{"id":"CVE-2026-32849-684c72a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_msession"},"deprecated":false,"digest":{"function_hash":"207086280800981881973031133780046070793","length":475}},{"id":"CVE-2026-32849-7fa42a97","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"function":"cryptodev_key","file":"sys/opencrypto/cryptodev.c"},"deprecated":false,"digest":{"function_hash":"139025623665082852239157027794658213145","length":3174}},{"deprecated":false,"digest":{"function_hash":"162023778847867267885768190020846282572","length":257},"id":"CVE-2026-32849-82baca9a","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"csefind"}},{"source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/crypto.c"},"deprecated":false,"digest":{"line_hashes":["231247306203892378390075086592635364250","153167502819574470728495609053146434774","46525019500143999148589388552951466258","3509802664344311204147186746514911878","119698551392151761046858325125619403574","18111631854354495652786162592503777120","13535279044374058297676251545891440810","278090271865104745367347392959691575773","119698551392151761046858325125619403574","18111631854354495652786162592503777120"],"threshold":0.9},"id":"CVE-2026-32849-88567904","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/ocryptodev.c","function":"ocryptof_ioctl"},"deprecated":false,"digest":{"function_hash":"227569463552373435334943280453459482844","length":1766},"id":"CVE-2026-32849-8f9c5943"},{"id":"CVE-2026-32849-99724a7c","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_msessionfin"},"deprecated":false,"digest":{"function_hash":"8372047147193189110540599336003304400","length":385}},{"deprecated":false,"digest":{"function_hash":"183181258598533726377332079663375156884","length":181},"id":"CVE-2026-32849-a00339a6","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"function":"cryptodevkey_cb","file":"sys/opencrypto/cryptodev.c"}},{"digest":{"length":304,"function_hash":"273838581815582320619370280762494540966"},"id":"CVE-2026-32849-a302bc6c","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"function":"csedelete","file":"sys/opencrypto/cryptodev.c"},"deprecated":false},{"digest":{"function_hash":"153701813411772121639437223835364376196","length":411},"id":"CVE-2026-32849-a3c754ca","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptof_poll"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c"},"deprecated":false,"digest":{"line_hashes":["131940778157053784186599624000608693109","123489473290972830951843519245172841964","72982426819589585711956368911236806639","160570313525723528859645638741614280560","277458639181186454036889357112309056683","65524908619294178454630401388858739470","174715985816838253996594773945848853938","173303697190566824940845549089667546854","330926194806165759386565784993186322539","208288075524735936269120679600757528862","274556471578573513774130223129957086623","152081153781375173285727484632483436654","138773669754977595802064692385292842697","158547398634141721601575248403120276539","45900341934759763634066514726597437279","183431468093512613340935088835860272849","213832981679904528254402268648050602492","24039444889982779135341296620791806073","165695651821659915570382284991193033476","260212637693139504218574891815623629347","153206256394908794837913697285229609077","22741286772136663900178336117637886923","194743111422368635746587303703568856089","136354080958385510370861482090528427764","162975492432145088051769368965893428911","174939217210588101147997659239515883038","264107733815056286902295006066108531329","122991365426180786345133111218881311751","312497472352313226368195174266199003466","92220396684546709731168051344638356643","81225412206609851735915882124873680140","267484033876672030600957250482435767545","291698517207154509472350486385869742648","46901983230049176165095224705726739411","20748415003873105979726406465546951089","106284124716942264667634050034631943787","157520051293563094679717091905375568926","327191155327047104524838163645563868800","54584448677740129899869307372191593949","115785751867524562861077210676578593468","192528495221954405059016064941272969478","300559408988298850065338468113867021708","7092919922090132215646986497018980669","47014512212408628132996473971721447218","263789404589608912693477883607219387314","284954109752413896877100721289360866181","41643065109745560935204920488213983946","162523118369717597232315721443207518844","203232256787556981209828025329395297582","233901023230911680547748127785920354935","144711045792858717474433739986826137569","104798255968317958706647621617458536961","70803484491771416192210412235587540429","222202100602171401557648325597425735354","299323538478282601298371083253320146136","9422898123824309648890866846904772346","21712887958162280206928213656244507433","237840167896075191979217366232588241187","110344844064222085519835711297392495215","53768047024827296107484310703475332584","334225236154057599227271277993391185835","186877274326079577432393241328561432426","55269741537909887413608888439421488274","241807245873257538779222670368672995952","88401708310323268041793823429630105361","173564949755989908679237997535804476883","28619119401129535957823805445541146929","109378589411992932974186265522455577950","85295167278516815536688628177823363940","11148425287783562963985446419407179274","23827288968505855814407107088031877392","153554122816621295612831945256543179302","135252713370840925558960826819619634244","190561082997709798943676810096758372691","125420317602724206534862873654588664868","115978688147168845273644643688805144185","141545433651649433848152178083058009012","137296247853161208199464510604450446644","118702217081423877692445115255551675229","209610122096971622977406634702540620501","302715355392201673170086914708733459645","171241260862029967573876646893176092457","284167539980222856198708569639929560181","80201200607111028419424981125162627830","240070690212809806253153722208243869426","46896428712899749692048294280665811175","136698346393677413085569614582397162035","10990748522231448993481036161391843113","148288376547499270346838125765700589254","60629054254003212363708872745025382317","119622048574962920308056529106210808855","129290195503462516039193406721293234809","264977908884178027311193831416690547292","106012782949909782431583212573223459004","142622279939167130489579303895393960130","149133700228989055293549045059495560100","59388211128968542859452774736745661154","332663803805339621233119451056140639738","336735732147304635300090469039378195736","271208850356005783903788987814013842876","171898809972489105228125425675038586066","150460383173712509087906378372130809220","137758655728133199371338360265069924216","56811457218209854773784396729568687969","336748577457909006181905802371716219769","117429241845058669065660640698774281664","132091868054816944004234994293634060223","37205606088063879161031713723593672173","136152284695813948109820311900317844544","62473697853543326687486160719840347271","6688835941818457083662712855866104632","51256686782919536151053695030120776587","177965691603017541957461355225437073458","33129086435282356794259725108290774546","195731553740635652122356321697949644141","240094512485898647448448178231487919484","214494324523907054790922778300291816870","338426918365201112386278775261144600933","126690463650566277813617876373253244200","116039815024872657981070530726583004368","112777884627889884241213886751822397780","49884540079646776925797525371906995812","120233318145561566479149463308324019565","244518769272813531158699791658347919028","141139717990150882414236629911397309691","164218334342802358934094031629039235851","331183556345558580801358351262755330868","170146403492124714799059093565861199084","93717484679565820391765162042458837623","335640212247006720640390566326390159169","315271990573280792407501187389926740715","39492421305237098224557775810826587668","91878891486401533648942882145601390426","21900824688808983436820247250814172630","233647500579217457372118554733885803679","110089602041674551101251256758580748329","79629932292040001815750472413983799335","276302661104581664791145697289291632466","137300755258857734595837481202413546483","166506903311037759766990150937529292561","179074260519864546743711890141125176933","232043832955107708795063278428027284489","196651600228653230368228280660966420725","143214620466496100904778135914148993130","302213412948672375577801204112565627900","177645606241302517303523290475647273289","287041788687315683491876624668207460419","203562595944030046376080056776355452615","148803940666131845107143635805241284080","84047047877518175398891407137995802469","188987965330030202704004422403322983942","80628083128218269842650870235337545305","35824871840143773537105462247985790212","216694722772278945771299830723655755239","104643528785868130338635050120573711472","153731251508903987259535873501359583458","258945354115011915645426219725848646372","69398270685309733422410157589515315829","89579312269420276834900919265646001700","219164790375707891524154856378669781905","102378883183779094049587273811745903868","309931922479809227482446568016895212404","250351489386123840281436154119126828246","307778411835155756482535722226872237481","35639232658135301588545910686811291427","49673288528496263764767232312354773475","322382118208949584663620049438723803516","221465525165036397702000111591163733929","212538030003314758364199037065077540654","11588612002094333638764464780846558899","95137668250555298960354321884800831322","306255828706963699766706341546746725976","8365478728500139635840521849486272306","307984696526597666879713727283037544222","96247845487181510121596922046675685523","276404703758630528744106185488976144903","267016280112391002077101595028310810417","21149484584133657215513948577963674639","326225081115733941635305783887648926725","262382404220519443204762754016186931276","290390565968274480121256897860791489737","112888448773372250895593230375675972808","292513296733220142134147393548756988594","293249375071403782455512108205492614285","239264616049462863674543374816548062499","331614992591775826738160236543166455822","316170121514506750038627356923267992672","66727073413045280549189116118601005853","257495035292664657821029560748426999016","41951117300918038150643752024231940012","230860054948160150272810318399939301376","280996821908882995011655601441496270773","167629230904121096441776875681765784777","320480383683526632403151191869870681283","311412210612151945537692746639947035779","84824037397469920781843797286401654802","216244427539730859040545609694089791257","143301382062851487563034754519458199304","137566315679073762539488801174902953696","247746680993595559413196007487925741754","187056296419379603024696614820729048999","24664459953738687736224490173257410729","1326406253855549919154317079824739210","164908169944742179778478467155595465514","54262701202066672852500303031553868633","8465082537181527849121364700344746524","194675284462365856329269171470282653435","7499861069737205637318697219370574123","118733189816856943174548820695510108543","289360906146316304907417067995436914351","220980286384346919628384729204906839539","240969233820392386122435409646541828410","51141294619141858966348989283482959264","115150581403976746181244952137343421154","21634999836214891227617555544140854016","143062715552912269742384426211398988622","121470737858750981694791166809173205454","236397694435339166081298129462785990286","177609761104383493842952075637564343970","74667542145227062196173372223492033553","333531572432175904899595159199973334152","21619028404528306628000178145853749792","70634280659503059205942638103629244131","155650435013583245651963446905524509708","136448103693602650137640132568508616464","331458522422367026234594193433318425911","46205238871140872512429870209324408382","156576266627947536338920484034286144905","125752695091308243962564621326221983765","270514788815897530898954235291537664135","39145934906114605040637916881813612238","283170691332945802024322326211704965792","281005844826940729349352768360048334397","20358440013899242321444149520412977514","289997737371468163146035429668365934028","230500700068015580630741463901553849143","230260425971070115277764143327957827214","144503266853475152489656678310781015882","263516637197204841998950929371073722112","200278271228563914369911480674882474231","268141415163900254601441578968146345566","168248745551357202279486780344854268523","158414976280882301507506013730802353922","248404288552170284664557302368307630376","18321537161003183069971878570424763197","261335792005786246588454232547177432149","329766034600105780378784948965878934286","67258734458559951289579645905985390413","144243704688902081540642665043603634307","145549308017410363310405180403720621466","328234991734532192119308974791981490034","19052330817862159371686730287302872738","44453510201301685377777246974940126646","244586275232177701063363450361716137221","16213209357955388103628004972491279916","97579679386762227865149505842221563074","309247427775472240289825740598710156514","39148304306569554137240091408460952948","194859317208496685234200094284751190615","269047292425206199904801556237969489189","158278524005877993021903933609092553277","55537057114374307169191988574210369396","179536165108636678898405420419210744246","271646848679908063365209220812267064017","238648216563657214486954455968036117338","236677982491553422089180378649821560632","20374012851883970740998383006057163159","137812505914239083555920935142256254181","37228847831638374612323529676817061501","50955713312900014850548722199673556538","153007503574599591548806254406657184842","76099163137675814615833388791506497399","302991426546986911310541154930650421979","135605859174613842211949740747863515791","39059670608085660359104771123075350914","19985319699374356817899488983841897169","117468529126002100773859946915939047856","331268952428567081798727120785351327909","305251100080435428027762836846008536934","245469285589156620899403078926897899833","86580887308789219884146223731371229301","335912667999036220756117048621363472604","179076960539129290381086557427532111008","333289481637190509069189979928804915357","238166675478666515131250065337714852913","98799178169128131787304060362269312025","280773091455935872810402576861434813174","241020923839219499999520952371764096116","156315391742798919266227292773670048221","158464603170288099376132382752140849027","138363915106079075686007425050026748872","111751576607696226221219691138357029561","185007038976680018098501516153918084139","33893048354930305643448189504835618052","206178470307661935732046546096446707925","260402507482498958760161346060824960150","251315385016312356944843774975114462393","135514233247861362905610036786360740416","120721198255467845764533450759335822367","216018840896616258772964894345061415204","64768495634237827173730916484418750634","283308569998003607626130088280335588396","156077829858261889442092128445454310924","63898001832991958461142195442813654517","171417122239245581086669198805191729885","38374284394782803213286387218628107232","274766697755559982120470126003398869899","274463016830555512289148505627618412393","287348004123002572151508821262410379637","121181062970751176414892293299796400826","230060214082800448625657350283032598371","212056722352141473080736280075101717130","210098534984628654150056188430598920076","28087161645523318249037431999881939410","256484919595438446970075083340807714025","56845075080929047237461818254839194045","42880475856167511855178518709984618148","188797130293798925851891933283990542184","291845630914940238740093326925416001951","313936491575637571299595764220196043588","301385359532365364563860382989004374757","115133550314449687981448058120166269113","205812424184199558237461211303918012271","123433132356181940174114992920464302007","52042039466737689933893664977696026303","199035731932910210915652308808434640984","224184485375132284505114138761788839277","32770517127879100985834247857393247239","38448566762257609497720469426895549471","161078929351026338491728710753241686915","283215776754610727545465515549015882154","153127807809092718213112752966038705619","241184805133636051101380675875250629950","57640520280209283041604576310307185781","59343531605070622669254854490577622942","257174314542713654075790689679835081483","100606802874946658858835300979927343836","312596683176617840971881589329919492128","38958415929513196210745582331270097319","83523645357608013841831268159894329752","283215776754610727545465515549015882154","210780855591274302368486967258722302372","138544478601451840520975393015815691013","206423778057957342501282136081475910509","97295615893605960448304466194912046646","79139503398116578167876663142631637397","73294547163560108125016628260082388551","86627591023931779698753768819649615079","48843323523975567254052259448371177506","10224184987769726843021911428264511101","86080546496913097943379515871703020432","41402244106078711382768914804081337353","165603213964707436748927714554775342989","242492314863066077107356330916171771792","254546505223688977279455361988955452028","58617159208056641921743033182690353327","244896736055576592789885061777138277766","23426109253904941022469259469588326783","242930151430399904366137515999621113184","90883990357714799390146022947578451389","23314740085853025479319472041450579567","35311691279987723633544127912695291633","281849800111385664214536407956269995455","216696391716269367984783479674483634976","171511646521748990300557865719447763567","229235196616056463799810981679513716893","185477144540182289661530593066112498754","306279584897199230484881344964319714788","248000506510352584526541968213905199137","11845300999710546938049420991451255054","103837458383763815272052521898391975187","164602368796064786673909952749635869493","25318400755850407838010221960453855042","119139758740348390589197823050557291784","237676988748464900545863735794983193136","160691262337981338962960944700111013525","298238553168819676516434665369417243830","339581198192716365173123039317197231278","765377257421952674235091374906732044","28877120498123356738735530265213806334","120690932045559536138116481668492342101","212261084599997373563679517522867127121","259760030862362534893125606182381754073","114940933395345836832534935761467579208","324912318405959171266240324563361430958","335022454188397766185562794712239237727","311737663357541858947709811731418035546","38281437712121717219121811925595382775","13290867443547403672244253487414811959","168185863747550546681649965810676443120","156755577952079070062454505858656363805","161203318065974177501149107313613807775","87697431195256368667269431697950241724","181835078057324174811368538567878492676","200475470571524360788140816555781876311","286490175923308066294347097183142718634","325513054634678308173089850182838059968","245147202811749020978964372304839365644","62374718136594862585561285275392813789","16396465588509644406317272626785193904","180018708643493640541727347414384327839","121374359710169184910666910931556261563","117474401995023783445039265099110328658","265444080669922492042066310020877752963","101132051588857128347849050485726186103","254533534768608063152852523821267190337","259454077104626156185516811202789112162","56559352416205749884835072717695510503","94584454931369898130727068350662918552","231042130561592400844341789427607268057","50299510750768127706151786046375316361","44892921569773142231857716829576769523","319585010930019237615288605161805782738","54018432405786839220311848418812025800","270918916930512569641502141898468980714","18835662655096616735326207561745512464","92066423578255362436996777912465441998","125584338115741885824254940709073061218","280065534953979010152397382590750003490","27797079509659869149056834399506110482","202912421827416460531157881271138490305","54201844835879442463800185494843942749","156979908349443768151262011121673925748","286708508325729017252522231865666320488","85243258063508069366039703737957383957","205277216020519863119400119666101201937","245490719642627850127484612944393346978","48253434624301503259559017795710962434","48713339092784941989369679731531688756","42048539372427289799491931811625483415","201541717412904143452260414197344225132","179709829198741062504623205646136023381","297388491534082066345679099467644042382","146717987271472477162455943829870245045","303001710338031096820887640340568079628","262484357398159321824333602839066593614","43311183211566828578967923022907267538","97195686523686665073479616337320044647","95661253046171160180093232036546644634","285934001467894166345244070270186718640","154441255033580933076085049093514995827","116788101358443358211245437712635464972","326591827052505244505230914781278620974","258545118165292948663336020627878624450","131048845970177574929708451092492259779","274340791640416045865837326048814733530","185882264094816680130220500928965575261","78596843112942475366397735297893099406","99873430448377702826895337695408502520","274568204640119892206036802660522613175","170340044684316858507827214472584704051","311616355848556729414496159782548138406","222887720471436782218490720754935500717","25426054212166572917478363866952091789","238234744537894530471466400938111950860","269560787419506730206026358661538411480","98154954007672455096058771102932982455","97791262558234111103604784702061322715","174030247001307953494568780113614393465","82708935101406455288062088151854308908","57840036331464597310643690849732919955","217227844646095298342005995813309384739","119031145478295229918511253301379612400","326489649325549345278910930878697421374","104804618771385573600050057077691563647","219650631796542813675688187896055740563","62925386133366095685889901559327898923","260298619143508117235702825953471608394","8406002818366389624937395393657431719","159319145357327374836216512127088472760","95480801689794480515443683277021779472","8619644129089090564315293526083923879","236457189691721414144735022592925911097","30557298790460701254565799720134717889","198109359336425652798109637200296434226","90913970331675090463604477205700531827","271239393741580093264106123915839582891","285498541830060510414412573380491405307","81411494149140633442771536477954335988","287891330772844855614746873904721705549","34495460568257003513714456052520971645","270528021041457827726811715432572912609","268444126579817977074355825333466884300","119741039345697466494598174081429583352","244699799796419587446256633453301842359","58040508550638752698980515840555549170","176090689195970296408877339747852434681","166396840988830321115960838773968710226","255392472530436181345758624211241557500","72981681385446326958868223432693031616","176942682187608371274457168867575239399","63921780401100736428241985003027507367","321149089378817591777305973369291002278","90209202529086659992139379213976618115","273894452844853312507725847155163722641","4573143398086083463402441056361987363","320289754047016874475090020005958087614","59068139410936141609241677967893968003","187801139667638534370999844379409413963","192217045824362730006646497943052693461","239495928296347687227060710040713325201","110749596989185376228038100332519210598","19090545478834740719638871590206870088","175769162794753196984557127107484598562","285239240498633582964895598607986541022","40941694340213587196505132230597170858","105112419588236712812596346696997920611","335678899355917744474230993004986179343","292078538295264862871658478619601369662","162278166174351915720266395452453601385","333503612105352445296510771607713530405","274503456690870692816095212637930810275","61097187414792066919762175533193397527","131376204074416920343123966101422074685","122481645096400487214404086350103791370","170379211207943615759657955252774723859","168788931345000590038269745118881748154","132546782414429963742712568481949631060","93164905850396613900048671778287449321","1785004817980441281283524461129945943","329072734144257600138777943757804341615","92028373702197624492125155509658731943","222447770964809999678539115703962704825","296307472488374045666707993825920678971","80606483952146717524534271816853840875","194549729480798252865329101185795365121","154835224480928149836665593998128946296","60209117060284426968265866030200392056","261610607104721677339214183305209584706","259117266176449279832824040939633230789","100550648931974170966527405069326620339","304168134548754055163032932150800723871","331136913173209608232930063708812669846","307728826539090815268593345067505560495","24061500609448288609231384832889717970","80080283000870590867567165686400951120","248691706802498202878455511744461771458","276747306337665165278232080985436564295","158464603170288099376132382752140849027","71803072610643184705608945996158138016","301366431072632807358865574697332874531","215149613064175940383123899024483928394","295960887084776969085894401550618413688","266101076395958844694978976959505018268","27879654140117234782034725990131454611","87372483568724412034968384199284797386","322407277533593531875326724966598966864","317941289732795189452627625272533273545","35271790015028803171266305995488208831","175622035796788453071463172378573307250","334867982464817190578547356963902292290","334875281869220014467649714966756159005","322614459301256621574588863700110722407","180716197846646141278107751007505836630","59897250481354551233902058040640971291","97004080882302024635852988718321514571","3767079669018203765778328028376624580","133725902239218760756854399455429744438","44811695219282739369691845208837332641","5867330249075531874783954894689001645","287806641680640521959840595780124503170","302234888311990981437936019538673854620","185355100389839428829047256970697699955","293907113131064374971817760226260012477","245047486361327283804119457957824297151","240380386219992447040255225067352792110","87793788432951487850942529363355216609","125424877758003540871086238022673116642","173705888370317224575965672725163659355","33775182687184707717777532652975622158","225271114029641328961222832247499378025","16003375958519157143006328964023025326","313417209392175444278983058719894229349","9812440526947751104105822340600854774","202578021467855862789202697650295619814","217119654175876233861176099043232049086","122174843168366467180731410923819800524","102998474710646027275315049832805093648","214815979776113847828181826313728291486","257507771700699266116802229774371019106","206966580516844681634556727663121142500","72297084924497943663961819847256518344","240366825361813098613115629419467133959","268235576907146485951509651951456129638","16212029363928666521725849896824036414","262459044929511580154188192604503852448","286490175923308066294347097183142718634","317378838835023357246726641328120776396","162834712113387017017356403789579998471","254541002619192985759433798993053760051","142673395723823534327853053066167832249","287804672573669785490896792785514753833","253890444412011075812110771166840386414","174659443736144224867455810843535700061","116429333259743703293794671578519842264","321982148225452395816775508386400343890","165284025273881794360950300263701328501","95231256281450729475558233987170829916","53136054126549435651928292210985815418","299381495726054403628518825995234613416","303543735339948457894783945818132013413","206665710916716141740451923671551732254","230461486643236480659092310092649997777","283535596145140676677766169171374189505","255888009275725184817601949717042497391","129788397823991428310794291430890581507","141887031338730438920304077582116894309","282013179176884982810750245741925286948","140842345632736114675776300441106242713","27624080339032814383167021043920359266","269426353484859910332556393513333049237","298141898579488397726612484072571742979","178150939831615740892982581029480912507","66625025226708105498506433586404921140","106711428994795013199998205184253376741","143376811891568222749250821150480045445","131218981870071067984736403294420692724","141541640947813433169478173976238617401","176321648393031762947004356357914220473","254060188719514330735204925392404770572","191645934301132152714515392236820351806","283667573182375646474454792411285186417","80266386272695842376295762492524805433","330258494907487274492188583966833765028","169455210189608672687677362199997722799","265391252132794853243575061542890369072","152729349753502958091591115715005743605","68800803167232678746569157451307664479","194531531519983574328218413212918453396","154547936669766708431355955675211476321","23895839619434453159862049014165595178","36785060448669533254552810066628104754","337464560936059651423160323733974111717","227043571507831234524139638578364283999","255547551840004930723093291633093914775","275932968287953271697030673763931103073","131658004542405215029506263684807205111","201706313500461762108789824503322498326","237277930041807758110911260466947991364","146956640618582250596622778647133486021","313228310405185378336936506029353887710","58650372210388062713796188330561057342","307632801061522670646377752854724261374","215461597989177615447880976658951767106","79529398354130133714141669566361605445","216349531682061301054550198574324340372","195481018615142197492620357249339249386","73249056974628314972124741244887593710","91922759628940941379663123706195011351","169479060248748574155483880555343432662","207287488956195683827753299208040315630","156390564159518349024921941179693116674","34043568913207310121056332872531185751","134422331826320216874068222493700759322","223299260251950550947625893742412595816","144572764344884799146575779410715430116","194389405937077494237111377548742208609","318399975856476760264610955558875635822","38221532402356783060739750492381379532","190563600819299604455833549790546374772","245170382329216253852848689983057681118","259272283177771308617386010112486285986","5261213784137712032682864464259197659","270434138757880821759280120883169463065","203963743281527227612931849180967607495","198157976431832930356240899372071450924","223445795653633290893155806764967329989","330973560850633865129956593023544454023","80263427864074617949725197938796699505","175846020762433390790843417129896007426","278043021731746426637775564609379933774","9414420094145151160800067444623668164","319214882035500406040923108344922399708","192940597186694794654016434431150354849","237277930041807758110911260466947991364","127437168869756086228953807219838318059","124562234504839350709491282069325075897","198222985447252375098230810993188135962","245531550121633830242897218963668762300","166481702164463437658852199386520561714","33658721349702310348112831798846545296","7551678003353030196453876691048182079","129176755768540404336636061843995458424","211691119113147418365685042742629827786","213168010706949143630847537408004964780","70219175184990512117883147957508778649","329373786088694605954927461362490713636","212994953252937642387448406588984856843","294097810082581782015117533867401474478","82148482426674367338688180090028440535","273322002814989386708516039289047848573","211976706517360208041034335024309083521","221865647315459274323830996254580930763","285037912336229691550981322705238461915","53473104621165412969712958661764633262","252685376207157110429106185800204858417","254496856946702904107506282704607246359","240119426224313254733361652315870870401","40768827690043226920606568338777395647","197745763363209739109874316646493825744","118269701315963408600235508295229527056","96169280476558717574932173012800534067","90650853432549208255710515152475474798","12838772099212257382146996830252077091","155017447999824127811991532834127560404","213469618953870822937690445682812333185","288636108563449407374282406918948266291","16290287688544867660492278345332749967","334850329357001802659903453053579342260","321100760839870428577429815849379181257","267596809383817739859283576231962004518"],"threshold":0.9},"id":"CVE-2026-32849-cd8da06a"},{"signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptof_close"},"deprecated":false,"digest":{"function_hash":"112269520579183743245647752838215867480","length":455},"id":"CVE-2026-32849-d50158ad","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"252167594120377489767165335654451798530","length":5839},"id":"CVE-2026-32849-d692904a","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_mop"}},{"deprecated":false,"digest":{"function_hash":"227170948164678114320750453599462076691","length":267},"id":"CVE-2026-32849-f61b8486","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"function":"cseadd","file":"sys/opencrypto/cryptodev.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"cryptodev_op"},"deprecated":false,"digest":{"function_hash":"51768515145887959471086867735192639646","length":6066},"id":"CVE-2026-32849-f8826ecf"},{"deprecated":false,"digest":{"length":692,"function_hash":"124685701569416586489071409259320347654"},"id":"CVE-2026-32849-fac53655","signature_type":"Function","signature_version":"v1","source":"https://github.com/netbsd/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f","target":{"file":"sys/opencrypto/cryptodev.c","function":"csecreate"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}