CVE-2026-55967 — AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse
AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream r…
Published: 2026-06-25 · CVSS: 2.0 · CVSS 4.0
AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7