pkcs7 cms

AWS‑LC, Amazon’s open‑source cryptographic library, received an emergency set of patches in early March 2026 after researchers disclosed a pair of PKCS#7/CMS verification flaws and an AES‑CCM timing issue. One of those defects, tracked as CVE‑2026‑3338, is a signature validation bypass in the...