{"id":"CVE-2026-40253","summary":"openCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c","details":"openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the shared common library (asn1.c) accept a raw pointer but no buffer length parameter, and trust attacker-controlled BER length fields without validating them against actual buffer boundaries. All primitive decoders are affected: ber_decode_INTEGER, ber_decode_SEQUENCE, ber_decode_OCTET_STRING, ber_decode_BIT_STRING, and ber_decode_CHOICE. Additionally, ber_decode_INTEGER can produce integer underflows when the encoded length is zero. An attacker supplying a malformed BER-encoded cryptographic object through PKCS#11 operations such as C_CreateObject or C_UnwrapKey, token loading from disk, or remote backend communication can trigger out-of-bounds reads. This affects all token backends (Soft, ICA, CCA, TPM, EP11, ICSF) since the vulnerable code is in the shared common library. A patch is available thorugh commit ed378f463ef73364c89feb0fc923f4dc867332a3.","aliases":["GHSA-c9cf-6vr4-wfxm"],"modified":"2026-08-13T11:56:56.018017550Z","published":"2026-04-16T22:04:44.005Z","related":["ALSA-2026:26352","ALSA-2026:28231","ALSA-2026:28256","SUSE-SU-2026:1658-1","SUSE-SU-2026:1723-1","SUSE-SU-2026:21419-1","SUSE-SU-2026:21455-1","SUSE-SU-2026:21492-1","SUSE-SU-2026:21575-1","SUSE-SU-2026:21593-1","SUSE-SU-2026:21637-1","SUSE-SU-2026:22293-1","SUSE-SU-2026:22365-1","SUSE-SU-2026:2355-1","SUSE-SU-2026:2685-1","SUSE-SU-2026:2757-1","openSUSE-SU-2026:10593-1","openSUSE-SU-2026:20699-1","openSUSE-SU-2026:21059-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40253.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40253.json"},{"type":"ADVISORY","url":"https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-c9cf-6vr4-wfxm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40253"},{"type":"FIX","url":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/opencryptoki/opencryptoki","events":[{"introduced":"0"},{"fixed":"ed378f463ef73364c89feb0fc923f4dc867332a3"}],"database_specific":{"cpe":"cpe:2.3:a:opencryptoki_project:opencryptoki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.26.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v3.26.0","v3.25.0","v3.24.0","v3.23.0","v3.22.0","v3.21.0","v3.20.0","v3.19.0","v3.18.0","v3.17.0","v3.16.0","v3.15.1","v3.15.0","v3.14.0","v3.13.0","v3.12.1","v3.12.0","v3.11.1","v3.11.0","v3.10.0","v3.9.0","v3.8.2","v3.8.0","v3.8.1","v3.7.0","v3.6.2","v3.6.1","v3.6","v3.5","v3.4.1","v3.4","v3.3","v3.2","v3.1","v2.4.3.1","v3.0","v2.4.3","v2.3.3","v2.3.2"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"function":"ep11tok_derive_key","file":"usr/lib/ep11_stdll/ep11_specific.c"},"deprecated":false,"digest":{"function_hash":"316233325855060296110392719792178260173","length":13389},"id":"CVE-2026-40253-0d69fec7","signature_type":"Function","signature_version":"v1"},{"target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_INTEGER"},"deprecated":false,"digest":{"function_hash":"285141234354275831093388882937730686646","length":1388},"id":"CVE-2026-40253-103c8006","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"deprecated":false,"digest":{"function_hash":"105326578507024351350997874492575991334","length":827},"id":"CVE-2026-40253-112c2d0f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"get_curve_type_from_spki"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"function":"import_EC_key","file":"usr/lib/ep11_stdll/ep11_specific.c"},"deprecated":false,"digest":{"function_hash":"198320867234519041838763689884198445659","length":6233},"id":"CVE-2026-40253-17dace66"},{"id":"CVE-2026-40253-1b4b4085","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ica_s390_stdll/ica_specific.c","function":"ica_build_ec_pub_key"},"deprecated":false,"digest":{"function_hash":"323712126465952423090265229810545710850","length":1605}},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_CHOICE"},"deprecated":false,"digest":{"length":1197,"function_hash":"221388983914565630430084090013582411479"},"id":"CVE-2026-40253-1f3dfa00","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"177909773453495478107657109972209606934","length":6740},"id":"CVE-2026-40253-23e2f6e8","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"token_specific_object_add"}},{"target":{"file":"usr/lib/ica_s390_stdll/ica_specific.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287013096276462023257856936732012273697","7380825567191608711366069796252323029","177493591792089451128581006975360071937","170367719739465777543505934233090649096","287013145066690980898446104902015582855"]},"id":"CVE-2026-40253-371c2b86","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"id":"CVE-2026-40253-3725a5e9","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c"},"deprecated":false,"digest":{"line_hashes":["174502235905524826884721879521775477197","59561252006095737977642698441966537758","34276843998094629076545265686758377820","207177507645818796408105782660298870586","209455715925537675886086249728866109541","21251002815798803977588663082446653528","117384561073238266118129267883789305819","119886815713771522081614894099848634304","306401882181531952832894618345431589230","38471024913569258788276773359286628437","154808514872627383386175444688730798926","3203836851675917163717126346822564395","229373120610483058720977128724915101713","19337331066837024759245026874000026134","27944231416404407158616646338028029248","305256331963279007323690911672702880850","169071066267581872974403683217183104657","166177627072568809490758568790351281267","183785264715202172333923528694251173924","267115968907764003742991605721269557353","327082181486007429042179817931913358859","195489022280728647257927226489539226168","147591314745588450270341605297706248310","65581746562026400293482929500907595754","74165551427200664065886271166913720573","84934854953477036822081651750289106232","240115458889384553632366018217680901868","47564532199071577830753626299986689526","55578036457455569030096374638073834626","164527095921352653796179981540480723456","96857496375984769665066624411123371040","212568573821879633320313286049080362038","47913127741995355401081081777190080003","25373130108012195711368964850410942132","175150414678654207193638632223171914494","17304490915196991973665421337599704872","110848067729313309601193737042766378899","135165967262964579549942499720617657865","172881868224302952354867173495500669376","112731899534485081534511631675414034785","109748925403685218508394533082666757709","18595953139738658058989734610767998728","84161683832313246443215340022162429119","253265234725752799561486064280504327125","56545751946354806139765244385116986898","85362484405089462550151738539821552337","165259562101431499285485691052359723377","95086841864002742931876953537698508962","253817468728978370812751345328809030957","336877988737540916802074890302978247019","169997624152170297688284208399416844961","337181423905005727909532257478785400650","46684555518337627460222196692854787241","118121897068098527983619211850429283957","44697792242729613490974424625414486555","238393362961709471959628991572776697843","202621971070817217697068847984440083613","176361683030445257733878543676276424031","327221801134258436862446218326148173144","136716911765269971384467166952375360072","266693800839945814771162216676670713908","296020103676936558076846666237809861046","56799423403304174156519139160442891151","39745415962695239724056889753832367257","7927437974747016941674740209159185691","65367296016797992463399905199221099655","291351037845453661449309325615378834099","226865546040707032629294072559131447434","202132743089319191542203050432761081603","294721987898874134322424096198060685858","83392360850363144461576322433215554397","118266897280799823542170844899748385711","226865546040707032629294072559131447434","177729881206564319679224063647827820644","288586575843371120696639501824691832728","296268980686705446580457325105483194061","195045477106572589731976221170157658363","267030139923403157262412904399268341727","220817548772381194262834258400033333018","68251162559663583924051182234105337257","192001854861912438872678039869164889209","274547336336319767328388816377060315275","61252362359115288569293768015317459797","212578478413972575399884913824520826542","129754226858953071680835542472158058041","116927388335821736780283141687450501159","298261501339946014423109845769583244140","291612952223620869828673750266306359934","16375610022314884845906798261064700440"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"151124521800278919130028033553894550908","length":2133},"id":"CVE-2026-40253-3aff49f9","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"import_blob_private_public"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_DilithiumPrivateKey"},"deprecated":false,"digest":{"function_hash":"12544536770601097295270881589972706137","length":4831},"id":"CVE-2026-40253-3e727aab"},{"deprecated":false,"digest":{"function_hash":"10433889550432441519062896912075301756","length":9296},"id":"CVE-2026-40253-42be3b87","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"dh_generate_keypair"}},{"id":"CVE-2026-40253-4e99c164","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/mech_ec.c"},"deprecated":false,"digest":{"line_hashes":["55551977820282476089646669239289464600","112515165507284529467857114283493661513","331546757193692904541459477594350586903","32048729251636698891459414736941189200","339002500514578892769991917625092867289","317377367425624782237248926645546894071","208512524493603727523051921294984659246","143881892668400237941668111567305681520","299651397498976049341668301745518958883","264073337217311888523786054289785515304","259010872478097734502320306161271752069","90896382153198417482146581678038502703"],"threshold":0.9}},{"digest":{"function_hash":"146084419402334547141682735481345055197","length":4626},"id":"CVE-2026-40253-4fac07b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"der_encode_ECPrivateKey"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/h_extern.h"},"deprecated":false,"digest":{"line_hashes":["326542134170215513478657939616113371474","165399444915889617724078283728234050715","215074251264259345692542286350929007054","93318371025510296483459138717545448304","125900988262263393880810985823378923743","169606880215964115083767964063290032887","24490527731672392924490345751062267099","197646571265612576794051797145443672733","74803377114157789278058826813921872472","64719394708964747921288386073337123335","262723611761222140197262668185460737693","144371158183902666928487335587644359542","303865875637099472231974381618310907141","88127273780339919917878199517003583330","111053071404247789346529792157962129791","56893659131545478642854400118229398824","121711568804531605946454879651029322940","64424045137369135450461065168898628692","314698852059154051946527201239637816839","84110578150150775379068767848143189414","292324878427084144348801919519706146524","210261633141176366870477634677034144162","302798769726767605910473156350865264547","74424355797112917352170792081578393415","115605986319407860789987336233825250612","193224590774410777756314907174035303652","120566524616420228838743664487027598024","37552212450215422201245763848828212106"],"threshold":0.9},"id":"CVE-2026-40253-53489a14"},{"target":{"file":"usr/lib/common/pkey_utils.c","function":"pkey_ed_verify"},"deprecated":false,"digest":{"length":3143,"function_hash":"35900008860382280853542643686348044032"},"id":"CVE-2026-40253-64259b8e","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"target":{"file":"usr/lib/common/asn1.c","function":"der_decode_ECPublicKey"},"deprecated":false,"digest":{"function_hash":"172662823170914679562113370301750005865","length":1893},"id":"CVE-2026-40253-692aecdc","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"digest":{"length":1830,"function_hash":"48530593419271066434779301125469971317"},"id":"CVE-2026-40253-6a0ecb16","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"function":"ber_decode_IBM_ML_DSA_PublicKey","file":"usr/lib/common/asn1.c"},"deprecated":false},{"target":{"file":"usr/lib/ep11_stdll/ep11_login.c","function":"get_login_importer_key"},"deprecated":false,"digest":{"function_hash":"158438024265090652915796087526496294705","length":2313},"id":"CVE-2026-40253-6afa71df","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_encode_ECPublicKey"},"deprecated":false,"digest":{"function_hash":"74697770323452380472472884204365365356","length":2892},"id":"CVE-2026-40253-7097325f"},{"target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_KyberPublicKey"},"deprecated":false,"digest":{"function_hash":"142269361357533569005580857458922966911","length":1537},"id":"CVE-2026-40253-70b077b7","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_DHPrivateKey"},"deprecated":false,"digest":{"function_hash":"310670174192460228759455236721343761238","length":2221},"id":"CVE-2026-40253-7114a62f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_DSAPublicKey"},"deprecated":false,"digest":{"function_hash":"107829891258444921855750012408046366992","length":2242},"id":"CVE-2026-40253-74ee42eb","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-40253-790dd041","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/mech_ec.c","function":"ecdh_aes_key_wrap"},"deprecated":false,"digest":{"function_hash":"266539508488949757962269514991154402442","length":6644}},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_DHPublicKey"},"deprecated":false,"digest":{"function_hash":"323422469965862114166354237420253315269","length":1842},"id":"CVE-2026-40253-7b4b4fb1","signature_type":"Function","signature_version":"v1"},{"target":{"file":"usr/lib/cca_stdll/cca_specific.c","function":"import_ec_pubkey"},"deprecated":false,"digest":{"function_hash":"24642138684908216839150245444100775928","length":3572},"id":"CVE-2026-40253-811f6021","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"digest":{"function_hash":"326675482263931166778901999954737830379","length":5349},"id":"CVE-2026-40253-81c2ffe7","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"function":"ber_decode_RSAPrivateKey","file":"usr/lib/common/asn1.c"},"deprecated":false},{"id":"CVE-2026-40253-826a7fa8","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_KyberPrivateKey"},"deprecated":false,"digest":{"length":2789,"function_hash":"230149966382493707189217353701564907683"}},{"digest":{"line_hashes":["46714287497905535497157121509519053750","59242893989792467687018229489128957584","229403677600630296037224426348930144987","217248497840570955280159390172015510449","189518129496074779136305604663737157578","36207683903274693167074333345965528972","328457627417008870127137501405716596853","112754936784610475794685355198481676271","182337336216279898711008633995222139063","24422429056864228173671038994039554011","334607514056230974140035032154078519627","36008844717092844263736164850294241314","214979366753563318299928365291411428711","337645572687327536654056743723266044853","328329160372443198549998002745400575513","191675258989349181704485793426219850842","338872530978607593821213368408547038443","213430693128984282113672996398016700510","48238398622657571656230766712005373857","59448326362671278852499562083379318931","225233005307760441960223889989408878752","142382939052083118272607504095603001267","214959289804552111761490851877910663533","230598769833288781428363573632443709126","66684609396065961677225692091210687545","144186226119662016262332565570537874900","51370826678957400644458665283479212225","124818549831260886653935047496741241527","232319914040782155760251554669842846326","285621506232482206501655338340212144010","30064022590870271358394423406203312374","22541238470995154324320508467996472061","68355294393598577554859889426167076160","118763466209926298592219187587658991635","274790635474607158190322817421000636754","307092809293483187033526549957824644379","227282500015011245658840952201180709852","257853091382683408029966153961606850593","170517593690247789629818645382846681397","60829428145217358744881331299216289227","197750687093375681665331641753153177557","114679395178958052093063845097244201891","176822782446874998709528413016548823060","209067481936540011089155315627261991997","155473226443477530892857427627444908549","1214978739520284707985949534631563400","320969832313644546077299770089807142132","161707355328359500895815525427365618229","103966920225541663527887614411952201950","18071414934784891031916446236597197072","132629531623226785709253135450581701364","84290015523971814146053993418617987689","139896499992600324538315056034028872313","79837937106203621968758677595840819025","188432259361397059518549458738613468895","168867643277636618442164442854920474319","215359782125594930540738683795437395091","276909241068574773905163380364292210551","15999509331217732940802142178309295298","46400474147315815422821903549801208064","318908172422747438758617520118470022785","297872066381936864395582410721401520881","118188243202146328015232210250708074126","277161092724159566506433341581139256940","26948921978822927065299578154841543948","280209850894029876388856194926314397372","264206161005757409656459873212848398806","9475263267016343435780890518937611626","305245732788144528613897764077793613217","189518129496074779136305604663737157578","209067481936540011089155315627261991997","155473226443477530892857427627444908549","1214978739520284707985949534631563400","320969832313644546077299770089807142132","161707355328359500895815525427365618229","103966920225541663527887614411952201950","18071414934784891031916446236597197072","132629531623226785709253135450581701364","84290015523971814146053993418617987689","139896499992600324538315056034028872313","79837937106203621968758677595840819025","188432259361397059518549458738613468895","168867643277636618442164442854920474319","215359782125594930540738683795437395091","276909241068574773905163380364292210551","15999509331217732940802142178309295298","46400474147315815422821903549801208064","318908172422747438758617520118470022785","297872066381936864395582410721401520881","118188243202146328015232210250708074126","277161092724159566506433341581139256940","26948921978822927065299578154841543948","30304771991421589354829561615129849149","261219353190368865498761750584538951081","312110217046178360635671562912698001994","60137673917133392713301017493090948914","189518129496074779136305604663737157578","287242552926407761817532107010064235835","135063519699901154864636036478212888832","49960648877296573300825760004758947681","59389589554882431531804540876293933973","91134035767063264308588623987035231844","294545678738429875124311510805848498533","82183402738346455162569159302165507213","37904159095560128406734409443114726744","305782590175409495358964382414636602585","10859712544058725798325596115949058835","106617499302896679285418229881593783234","75944691531508839996967479491805275881","340132365269536605900258713887490228700","318962398430939395696573113449440214615","295751403027431766700525266898457577552","151725021339815543687445428377979786654","277710877009826894622721002052443509587","215798559986562876684597369177909972703","133442564984953747740986632604706495004","328551740304990507990135728167865597122","132116365812324765620267903261144865624","116041335306315127143381294626196901620","261020004637858069072469317895253351431","208472475007902704709945622433112373422","244589298072278934138500533518892341975","4172032813141965297200017755928247115","37795891666220173479939016408828145025","178134982020021377617206296334958307368","36283572354900293780759754597982153241","333949225567161055065805074004368864891","60308626661620147662909033131497243356","130717352384484748574627103560434612774","202216782695071204210488391621412493717","159417071477641896673329323282437246215","131987744321766480904185720238729477400","51790984197484559594274442244599957914","241577029681239106722960477224906219603","308000974260194531287046048409057602590","168493568062081395189438324259404035453","233788847424018488002210741648279667264","162123807225045576934123909516000672688","164715610523423477375139749115514783972","254901643261312211335336970595790628165","84716829519812401880671370128285490555","295267898315628263529330856542710982668","323126144626027222277724836558414109382","104294522353866788224130426714976669099","304330877536215305548277009247200837506","43294881166527228330490446492373221696","206159574425761955541456636904593867991","318340832738095495386166310808953958488","224593949955591337210597965287781363978","44299355320101042206825290023668341270","228038607215201400612574428399943067854","64666885243450522779903026702030835000","45818275964356333609251856848016059460","67892457877788619198254536935719495915","98991342507172166904762268265940050333","65728785376066911519756487596099330913","336475270992055738061485509379593644179","284457779083904772627218835836763589356","253819776750496877853063455737897198098","204826954071322295278204836264500510671","277045523477077650248184301035760085426","293059982849198346941947944187566227749","153636177560814956311790597854056096465","137449368221016185424070665659228409850","80869306014421512538443757339279452401","237240312990209971367447648807429864494","136359879882396934954790833200929205793","52377814965681634301280674613493404736","13489727492624306818077900626686824580","181947548333995875706610879790237361700","191327803680120105487894161781893193574","30647416179185874973268333980410418308","302325587908034050490555354625601479918","91211379293826460774327716841839557827","208476223879842736610007773630730179921","212149942711486799705398395480979312665","121209583579382191743307024897455135934","142290478170687950299660228588600070783","25031271488537259096407111889069178594","118362441225679352845110098717102161275","98105882452135838869923721315586835985","125417028348999520780037227436060427253","243282629998875597334892997590602215084","107689999822257294766986410948826693621","179307299565197844432818550243699030021","200059837334307025502711252462220334682","81794408871789868922622264493392946934","30143765320282499835979486515404645140","328531344975268155338435019834844267421","123952445813070577493574665861841632737","299601604877335803200610851991128763526","64540652107712391400845815406443609397","173434130083745190270315221174400807512","229521993670145007768603320613192840637","40212070362754692341731440684081683992","321752260102028027474103704894395936427","310985912662555362321268449541730357773","99288406327716529610800040382657306842","42070388370259380911209952820912408506","277294069937147223754508646024352177570","276930375392098350802642110654150524372","142370700997951887734760216091690627422","190374150011499921774959477917919113807","320909832965909342148083615510792317417","155984972117581161806956300042779552120","188835143504433562041827523656978144943","241294369183551307532775211148859751832","171581458356088553078205386515757075084","164655323096361148282259634410047778599","322541551866379374256761131126220479026","235645964662499097402381035106001363313","126438754603318076132769252260588733310","251569839015377754225537379267533116617","132406242131743057832768135023852201239","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","93315528537458957798845599158444445845","243482794364823963349597542173362037404","132406242131743057832768135023852201239","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","221073418637628437758610756329353593653","310895364674843878554052500242969900778","25191063628492161352451506033184735555","307235430092385832827671677449152208188","98361967704324907054883935419859359687","165630044904536951151800369869982353307","287630368871082245170341497595096510575","21002608548022850693787092189443669756","109104257144790821674310997147191191441","247373705937459331461373720004575900655","264069665123137509852716151004670969816","250745549075199120052004725347262683100","128103067378689096646143674968028262866","80869306014421512538443757339279452401","37209708599506617643872396823158992551","133430678316869186332011606107147418355","148509056241125124858840955410909180420","177713513612769261538813697604162543161","270614380340156262628074853319606177043","297858852876778497226697110492048584484","308036162408798665879838086362471025981","255931577620207187167353300175593685445","222646830999680303427918161308014823605","123664969482720605796209860470595326199","7736658381077567702056032837864635351","250891368401736720914454741319208595899","237573853958363426467832557509872166881","7714790610612616349593211621824497617","135354162539755919503760199598996305012","140057589850824912949720664136145399949","160953138756979324759616315713772349995","134909947332313011208177912909954332958","308407747364471782431776930430731691387","84203722886637435787228869369664591144","176011112429200085086425610404066584720","243482794364823963349597542173362037404","132406242131743057832768135023852201239","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","93315528537458957798845599158444445845","243482794364823963349597542173362037404","132406242131743057832768135023852201239","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","226321236435604480773110366955811503285","77519450049556937153600507469107708744","124171031329608303176365509768933476994","303446836195612475832151194149414234530","47061814054388055556024941777079252520","332597306621188785025574186314258816903","25191063628492161352451506033184735555","307235430092385832827671677449152208188","98361967704324907054883935419859359687","29087442419045429170282249925988458489","148710230965947714277132804711949914132","93348831105909158690516069869562644664","162779344649552573846856438654883877656","80869306014421512538443757339279452401","338166840982530511013416349590863287233","278504534722648461692332578265176388166","17571813180170187182676918127276811288","53881591783912980270367819231895951422","270614380340156262628074853319606177043","297858852876778497226697110492048584484","201757978163344462589260245533890002272","110520336735932162608670224764544996162","128066902190909843821776136998400505152","147481657150218928876150203598878656273","270614380340156262628074853319606177043","222585389879625615625658246562833057923","212425866773587777819003417959249868323","283436261339147253255766539912738769967","316189633127875224815059881315475708961","255633349214590216743062473539725442926","270614380340156262628074853319606177043","119888179646955782257008926594449084049","72685471268266991958920539161632539141","9057346286556710004424337379349369993","94958670740201989752556107858777668322","147191830948004118753721743776046799005","145578421988406457336439752399967806621","290526797189397468067761890420715698223","182565958611952633354758739879138947119","56323829741064096083791935194541688578","147191830948004118753721743776046799005","145578421988406457336439752399967806621","290526797189397468067761890420715698223","182565958611952633354758739879138947119","162020451572458051331111134647443212983","100884640397669350615666461477547602810","158986067845956124660903401761750516565","59934407384475824237372711846075543513","185648906501377528395830933042478112612","23749217241465003043505413821298611438","182905853822521219408813844762381604938","276635072860492101871135035856059157381","65728785376066911519756487596099330913","266093436958161521181676153296976725013","271328464115178725439315397011341938420","34642778703484840670053811849766968751","127848710133656539457105703585506874713","121926602966155233477552670765498638907","8215396408224917472859287009085156730","26435424880327569895695621552114658283","307322617946778383087845862651884642136","55239130985519966404221865505201746337","215884294383381557537136638891170621150","12995175032233829617039629400090948187","310394314372097710710235149506341128147","250749423115831028894128521947935903673","41416385405348059626729041010163816543","263208923507486182287533803976853955619","84877713130927801658318571100858191387","51778037955043125875994200091902501184","24219840413677893943751643127307077589","140232905497618344855028141950753503724","126227334833686154602102516687618113150","88495433388803904462125627316475025453","285083367935354136243804917395845960898","12197925911329172166161789991946819904","314216741339202856847962886928339107488","129897012637152265528755668787115867552","312606393749257189186655204452359409390","317825592785025024703169663156156906113","333968039648077710575073418007715037991","320933777798183728521949218899534349489","231080834529155261750664473429576938153","321897917658202116046541122793237333752","136336602997278370723562663747460539680","285064603291594109904423106761363631578","250112403577177130380983769756031202060","140919552390228279512947039985020385613","154285776659367337474403723855175703762","33671993034878807900492134871138558031","326640272068063776166383005094115150617","230842643280977333414547210802543894925","327082181486007429042179817931913358859","225275658323658805193381922946408650768","96569480699602299799439495966907164761","138368008595995252633356376449281491601","31406351329484129497555065235334974199","134790842164490289699310291779205214995","119379680812490768940570184648821623396","73647349189378416826337736647500742384","85730432810684065095990830521432964461","258995734074455122050814071615014250199","271466710845235024625449163019472874285","176011112429200085086425610404066584720","243482794364823963349597542173362037404","132406242131743057832768135023852201239","126517493096653859223625564120972338389","257620605774880158111888458840119622475","231149513626109312423227474763564643932","374992145316138863027923418003439954","126517493096653859223625564120972338389","93315528537458957798845599158444445845","243482794364823963349597542173362037404","132406242131743057832768135023852201239","126517493096653859223625564120972338389","100344092122557129602704238941353945380","194658660921329985508889507309382616635","15969873316145987376348138909039692949","126517493096653859223625564120972338389","261890173747423575498439548578711847182","162351558777926540326522455428003209754","316615869354592980359880390946821308097","107161999517341610028463378658387928472","47061814054388055556024941777079252520","332597306621188785025574186314258816903","25191063628492161352451506033184735555","307235430092385832827671677449152208188","98361967704324907054883935419859359687","29087442419045429170282249925988458489","148710230965947714277132804711949914132","93348831105909158690516069869562644664","162779344649552573846856438654883877656","80869306014421512538443757339279452401","338166840982530511013416349590863287233","278504534722648461692332578265176388166","17571813180170187182676918127276811288","53881591783912980270367819231895951422","270614380340156262628074853319606177043","297858852876778497226697110492048584484","285893493872646804723055288352737929335","220765922772147159171813666409023888474","147789296391144992289420994282679067736","255633349214590216743062473539725442926","270614380340156262628074853319606177043","119888179646955782257008926594449084049","72685471268266991958920539161632539141","9057346286556710004424337379349369993","94958670740201989752556107858777668322","198156049569211771842963589007300119381","68493471763411009739239823312541955041","196180504815924021454843180141391939125","257894200648299982622760130282106896772","51897565301046585863749099753746030737","52764926636217179905305622968014600627","247373705937459331461373720004575900655","264069665123137509852716151004670969816","250745549075199120052004725347262683100","128103067378689096646143674968028262866","80869306014421512538443757339279452401","68840286927112004193428303062923721546","50884450823931199330634569963990959459","238263191798834373695668948800039707788","120358918119281360936834061996611720238","158498585950404014172843564616221571885","123250257740087903486315104989589887145","85226719381631408701658497820886805282","297264955954052725353123008472544147212","164262611554185444909280862201619470861","299765391229100930108673256503145758948","217534315806189615039880358229948587211","215861479420910135227118431398961115145","46262179162785828142833255701424539770","294337363103717963421159769256890201531","277396075849629187742494142057678089820","305530859859351077290046866215196586736","49183552006335974822243931717628281113","171119846320774546894029322422109570100","309213473654709550158703045434023174994","85109276432907028023804395383576418635","61981662335651386506232453815863225152","269185032201932865905242926414470471998","339199614711032854255208190346526218023","126438754603318076132769252260588733310","251569839015377754225537379267533116617","132406242131743057832768135023852201239","126517493096653859223625564120972338389","251925134346346014291740096355696310719","13354615928790714095272493313966943888","206210166694669504491510211821776287141","335137914881071437382851762260869307072","206537262729639379514555647051045623714","119634053295096443017800797253986035958","90052823349834858564570660825170506795","254850409098224246459801747164018721276","206537262729639379514555647051045623714","119634053295096443017800797253986035958","259070585702008083229542064339802903499","257530507300108071001391675788647147555","206537262729639379514555647051045623714","119634053295096443017800797253986035958","333081431326474780640231170796498610996","272144584760292801537058688317425088296","206537262729639379514555647051045623714","119634053295096443017800797253986035958","236012050479589779247493431181021135760","335084756980975300217895457864103977809","206537262729639379514555647051045623714","119634053295096443017800797253986035958","239828181954823635150164587221918982091","217395165362340279742359795503690518113","262839870110216382543999985533563320039","249532614321157730255571221176455919734","1445328067911072049556294819121124393","280315289512522292719445723082715474797","42004751006146471260617081143573210714","260207307486746651751585054544696990180","298320769194643086165056027563184238708","166562167687593902962628614405390273428","107009710597119617873843496642879576158","279691170101572032185385422576039380740","202576612521387251264547441060210454376","151543398809409676601689345577276181639","181456743786504419711706630884734464574","247348548128472635926742287260387554857","57781166941799240635110800540785753037","196180504815924021454843180141391939125","257894200648299982622760130282106896772","51897565301046585863749099753746030737","52764926636217179905305622968014600627","247373705937459331461373720004575900655","264069665123137509852716151004670969816","250745549075199120052004725347262683100","128103067378689096646143674968028262866","80869306014421512538443757339279452401","111932675367304507467729944469926716836","325571088714136274829733042885401710337","223232266097906029321342022398302714452","230237044843728559192510447940281698599","164262611554185444909280862201619470861","299765391229100930108673256503145758948","217534315806189615039880358229948587211","215861479420910135227118431398961115145","132520002385776191607818362017121206053","294337363103717963421159769256890201531","277396075849629187742494142057678089820","245131510579669414118867862179145020029","111832499611134743207324019106710780621","142874203141394149215572111381082386910","104685787638260884162299203965863801365","146941653119217545732342025914632960082","22747927968774710372328457824139898965","92933544827378034788273802437684280552","133750070877138093046579413172628603495","126438754603318076132769252260588733310","251569839015377754225537379267533116617","132406242131743057832768135023852201239","126517493096653859223625564120972338389","251925134346346014291740096355696310719","13354615928790714095272493313966943888","329497894995037379418786482109519794100","145524206856676149682226713485564790546","262839870110216382543999985533563320039","249532614321157730255571221176455919734","1445328067911072049556294819121124393","280315289512522292719445723082715474797","42004751006146471260617081143573210714","260207307486746651751585054544696990180","298320769194643086165056027563184238708","244897597502126624148925800115375619362","270950671852358695974364494585659196409","279691170101572032185385422576039380740","202576612521387251264547441060210454376","151543398809409676601689345577276181639","181456743786504419711706630884734464574","283512438191263079974751063836794781812","324015404058113567348340701280464713335","112189438510632799956775172889683810908","132263691945350723176437733938775722058","43420949726967613560566206119316654022","210914043651486466955369198887505852936","263123898570894179001900552788529739678","184042819799061462465039681986646392394","197003996504515817675293467305250594860","210165454049298420403520915512619601984","129388213944210315101472585946702198477","202166075368637892942979330211486761647","81674488723504289578409053280015288352","79583072121012559342107407813810426803","147697072048584253164941001568503245539","327601933348831922355180654771765567545","228248585110744504841632834486051662277","256738130645993594452959471709823636300","251772277358838546719527970374789670493","335921002830831619547361064647113394357","32037289701925984441657497638502929580","80869306014421512538443757339279452401","57147263661138533878880902835858307708","19748197212838842975664686557864207257","88548471655750791590980233521810426111","283323234439329201808942349714500253","14640318350867826595061807337842742594","316529833198454714772041344418952464923","290685240166846441493836845209610838794","192147883297801764852057278129852019642","278020193703029639993811819833791621839","300842691612035970979997027811570623662","14640318350867826595061807337842742594","241852952639758641418757936182187490071","130825936670287205739593055834562053786","303360130945188695310883526944868134940","285762936433028822497537689284703028508","42183383156546715979753957158601899737","333048289413339547903751455831180286110","14640318350867826595061807337842742594","241852952639758641418757936182187490071","266955963910723284613358611064508208334","137382683088893250274795049341588808923","266404995822895585249204105804987208938","253972944750548813781741536989943331198","129978044795678080763711766519634516986","129157670671499463691089360941704708965","312464087930512433680378385306335750978","179956727085926009253926950556726990189","299095867018989250300799099929104759106","162799102062999337148077717764084177641","229925233788465991506208390039407091405","133889537274668063784807643424367627542","109986811102075495371544684633131020252","132263691945350723176437733938775722058","43420949726967613560566206119316654022","210914043651486466955369198887505852936","263123898570894179001900552788529739678","184042819799061462465039681986646392394","197003996504515817675293467305250594860","188091077079659917480335187371525380286","55188797043283073364665566201228210483","150232279795073208005827656669044516770","79018815717481392378120716196953150124","79583072121012559342107407813810426803","147697072048584253164941001568503245539","327601933348831922355180654771765567545","228248585110744504841632834486051662277","256738130645993594452959471709823636300","251772277358838546719527970374789670493","335921002830831619547361064647113394357","32037289701925984441657497638502929580","80869306014421512538443757339279452401","57147263661138533878880902835858307708","19748197212838842975664686557864207257","88548471655750791590980233521810426111","283323234439329201808942349714500253","14640318350867826595061807337842742594","316529833198454714772041344418952464923","290685240166846441493836845209610838794","192147883297801764852057278129852019642","278020193703029639993811819833791621839","300842691612035970979997027811570623662","14640318350867826595061807337842742594","241852952639758641418757936182187490071","130825936670287205739593055834562053786","303360130945188695310883526944868134940","285762936433028822497537689284703028508","42183383156546715979753957158601899737","333048289413339547903751455831180286110","14640318350867826595061807337842742594","241852952639758641418757936182187490071","266955963910723284613358611064508208334","137382683088893250274795049341588808923","266404995822895585249204105804987208938","253972944750548813781741536989943331198","129978044795678080763711766519634516986","129157670671499463691089360941704708965","312464087930512433680378385306335750978","179956727085926009253926950556726990189","299095867018989250300799099929104759106","162799102062999337148077717764084177641"],"threshold":0.9},"id":"CVE-2026-40253-859557e9","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c"},"deprecated":false},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"rsa_ec_generate_keypair"},"deprecated":false,"digest":{"function_hash":"51160470784199829734805674819077056547","length":9895},"id":"CVE-2026-40253-86d6fa75","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["319850228522990741921589729169780856750","151929567292615775999076592883537329922","1868035427086258729354721585530938469","184352072704166133008996606273072828414","49939334142403517812277577075704631204"],"threshold":0.9},"id":"CVE-2026-40253-87999b73","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/cca_stdll/cca_specific.c"},"deprecated":false},{"target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"ep11tok_extract_blob_info"},"deprecated":false,"digest":{"function_hash":"252097091999454714600640050141507460801","length":2320},"id":"CVE-2026-40253-88b44bb9","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"deprecated":false,"digest":{"function_hash":"339333294770581670306527104591055065981","length":954},"id":"CVE-2026-40253-88d0314f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_SPKI"}},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/pkey_utils.c"},"deprecated":false,"digest":{"line_hashes":["114995635981773388748107688625853949987","18613809124491395034861337970537345950","108725781721642338669375672140884904053","338415711454034216150051594987360183732","201439184966988869084794375516921942802","82340477756795258068959148292155575411","269292620207987149064055285309308587167","180213026810903828349812861384713833409","338415711454034216150051594987360183732","201439184966988869084794375516921942802"],"threshold":0.9},"id":"CVE-2026-40253-894e1932","signature_type":"Line","signature_version":"v1"},{"digest":{"line_hashes":["68647019237482007480184677583099677947","231156457061920939874979954931364282866","80204970376560610474503261244949973702","317286797818907967776842464866144446131","47376868429051727729683928528822870254","217134420903287378250731715349698570368"],"threshold":0.9},"id":"CVE-2026-40253-8f202c86","signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/key_mgr.c"},"deprecated":false},{"deprecated":false,"digest":{"length":3656,"function_hash":"275490390182592551047955341380718188842"},"id":"CVE-2026-40253-9b1dc9da","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"function":"der_decode_ECPrivateKey","file":"usr/lib/common/asn1.c"}},{"digest":{"function_hash":"324314086414813422919269031107304617535","length":1095},"id":"CVE-2026-40253-9be4f928","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_OCTET_STRING"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/key_mgr.c","function":"key_mgr_get_private_key_type"},"deprecated":false,"digest":{"function_hash":"115195518389432096110988892948265356019","length":2689},"id":"CVE-2026-40253-a05bb951","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_PrivateKeyInfo"},"deprecated":false,"digest":{"function_hash":"263096239116716947544006541895543912405","length":926},"id":"CVE-2026-40253-a10323e1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_RSAPublicKey"},"deprecated":false,"digest":{"length":1657,"function_hash":"164679212744437527318948085344389453693"},"id":"CVE-2026-40253-a628aebc"},{"signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"ep11tok_unwrap_key"},"deprecated":false,"digest":{"function_hash":"33887345080508852416145932918628991428","length":11085},"id":"CVE-2026-40253-a99b65c2","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_BIT_STRING"},"deprecated":false,"digest":{"function_hash":"172204746466459812441218637199057983926","length":1095},"id":"CVE-2026-40253-ae1408da"},{"digest":{"function_hash":"118841209452251347927711801515588113259","length":1095},"id":"CVE-2026-40253-b7749a0d","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_SEQUENCE"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_DilithiumPublicKey"},"deprecated":false,"digest":{"function_hash":"136074822604283583812926992046554460760","length":1975},"id":"CVE-2026-40253-c24a40dd","signature_type":"Function"},{"id":"CVE-2026-40253-c5d2a040","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"make_maced_spki"},"deprecated":false,"digest":{"length":2547,"function_hash":"196144782855608301512393347665333144795"}},{"target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_ML_KEM_PublicKey"},"deprecated":false,"digest":{"function_hash":"289961243844581096878338873130418043211","length":1462},"id":"CVE-2026-40253-ceecf265","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3"},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_ML_KEM_PrivateKey"},"deprecated":false,"digest":{"function_hash":"124188691235053849328272805587781430426","length":2986},"id":"CVE-2026-40253-d4df7713","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"dsa_generate_keypair"},"deprecated":false,"digest":{"function_hash":"99287274931501309826709904058981895133","length":9301},"id":"CVE-2026-40253-d7d9270d"},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_specific.c","function":"import_edwards_montgomery_preprocess"},"deprecated":false,"digest":{"function_hash":"171559714832376417951600609431746420749","length":911},"id":"CVE-2026-40253-e0c65fd2","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/pkey_utils.c","function":"pkey_ec_verify"},"deprecated":false,"digest":{"length":3880,"function_hash":"57214196539608723673837843252923766286"},"id":"CVE-2026-40253-e59c8542"},{"source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/mech_ec.c","function":"ec_point_from_public_data"},"deprecated":false,"digest":{"length":2342,"function_hash":"293377788937480286049995320203494742801"},"id":"CVE-2026-40253-e98c5231","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_IBM_ML_DSA_PrivateKey"},"deprecated":false,"digest":{"function_hash":"161147282983508358547892654942834743046","length":4944},"id":"CVE-2026-40253-f0a00165","signature_type":"Function"},{"id":"CVE-2026-40253-fcdf0620","signature_type":"Function","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/common/asn1.c","function":"ber_decode_DSAPrivateKey"},"deprecated":false,"digest":{"function_hash":"22391309659855175150233110988827978268","length":2760}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/opencryptoki/opencryptoki/commit/ed378f463ef73364c89feb0fc923f4dc867332a3","target":{"file":"usr/lib/ep11_stdll/ep11_login.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["146526010024784686241674902850922624604","212391102077250211663938913295948402061","15783291184894213373713551433444530116","50059107556870201479287313314657805612","43751409894147971774704530424185275284","307391128693607561094102328234351038543","88882419531136747610442870923649747975","218179684129913725581767260486580165999","237822094601656808317559544239104016993","132225419919570478491977228727562041396","258437305759936301069426237130209716073","71393781409358122445392184132433350960","335924110366429272437334590697901280651","229770667570540384914036101556872117223","61197083476157833309945612774208264139","53236811207228776878997900736999564549","103326754778385982430133546522692380038"]},"id":"CVE-2026-40253-fd9ac8f6"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40253.json","vanir_signatures_modified":"2026-08-12T16:25:06Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}]}