The OCB feature in libnettle in Nettle 3.9 prior to 3.9.1 allows memory corruption.
nettle project nettle 3.9