CVE-2026-75803: Openssl Aead Unchecked Decrypt Finish

AEAD finish function calls decrypt without checking the return value before comparing tags, potentially accepting unauthenticated inputs.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-75803-openssl-aead-unchecked-decrypt-finish --engine opengrep

Description

AEAD finish function calls decrypt without checking the return value before comparing tags, potentially accepting unauthenticated inputs.