Is CVE-2026-84971 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84971?

CVE-2026-84971 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-84971

Description

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to control the responses the application receives, may cause that application to stop running.