CVE-2026-75805 affects multiple packages. Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. See references for individual vulnerability details.