CVE-2026-39853: Osslsigncode Memcpy Buffer Overflowcve-2026-39853-osslsigncode-memcpy-buffer-overflow
Unbounded memcpy of an ASN.1 SpcIndirectDataContent digest into a buffer. This copies data trusting the `messageDigest->digest->length` field, which is controlled by the attacker. If the destination array has a fixed boundary (like EVP_MAX_MD_SIZE), this will cause a buffer overflow. Verify the length fits the destination buffer before moving memory.
