CVE-2023-26084

CVE-2023-26084 is a low-severity vulnerability affecting Arm AArch64cryptolib versions prior to 86065c6, where the armv8_dec_aes_gcm_full() API fails to verify the authentication tag of AES-GCM protected data due to an improperly initialized variable. This flaw enables a man-in-the-middle attack, allowing an unauthenticated attacker to compromise data integrity with high attack complexity. The CVSS score is 3.7, indicating a limited impact primarily on integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.