Do Son A public announcement exists for the Cisco Secure Email vulnerability pair in S/MIME decryption, plus a Cisco phone SIP denial-of-service flaw.
Cisco IP Phone
The bug, assigned the identifier CVE-2022-20968, has been described as a stack-based buffer overflow, caused by improper bounds checking