QUIC: Unbounded RETIRE_CONNECTION_ID Backlog

Use-After-Free in X.509 Extension Cache Under Concurrent Use

DTLS Retransmits Handshake Messages From a Stale Buffer Offset

Timing Side-Channel in SM2 Signature Generation

Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS

NULL Pointer Dereference in CMP Client Revocation Response Handling

QUIC Connection-Level Flow Control is Not Enforced for Streams

Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake

Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V

QUIC STREAM Fragment Metadata DoS

Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves

Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

QUIC Unvalidated Amplification Credit may be Over Accounted

Excessive Memory Allocation in Relative CRLDP Processing

AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

CMP Indefinite Cache Growth of ExtraCerts

Untrusted Sender DN Used as Format String in CMP Response Validation

Heap Buffer Overflow in CMS Key Unwrapping

Excessive Memory Use Buffering DTLS Records for a Future Epoch

QUIC Server May Trigger Double Free When Processing INITIAL Packet

RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Unbounded Memory Growth in QUIC Server Incoming Channel Queue

Client-Side Memory Leak in OCSP Response Checking

Heap Use-After-Free in the PKCS7_verify() Function

Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

AES-OCB IV Ignored on EVP_Cipher() Path

Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

FFC-DH Peer Validation Uses Attacker-Supplied q