CVE-2026-32849 | NetBSD Compression cryptodev.c cryptodev_op dst_len integer overflow

A vulnerability was found in NetBSD and classified as problematic. This impacts the function cryptodev_op of the file sys/opencrypto/cryptodev.c of the component Compression Handler. The manipulation of the argument dst_len results in integer overflow.

This vulnerability is cataloged as CVE-2026-32849. The attack must be initiated from a local position. There is no exploit available.

It is best practice to apply a patch to resolve this issue.