CVE-2026-41681: Rust Openssl Evp Digest Final Missing Bounds Checkcve-2026-41681-rust-openssl-evp-digest-final-missing-bounds-check
Call to `ffi::EVP_DigestFinal` (or the raw `EVP_DigestFinal` C symbol) is not preceded by a bounds check that ensures the output buffer length is at least `EVP_MD_CTX_size(ctx)` bytes. `EVP_DigestFinal` always writes exactly the configured digest size into the `out` buffer, ignoring its `len` argument as a capacity bound, so passing an undersized buffer caus
