VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 19, 2026· Updated Mar 25, 2026

CRL Distribution Point Scope Check Logic Error in AWS-LC

CVE-2026-4428

Description

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.

To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • AWS/AWS-LCllm-create3 versions
    <1.71.0+ 2 more
    • (no CPE)range: <1.71.0
    • (no CPE)range: 1.24.0
    • (no CPE)range: 3.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.