Maybe if you know so little about cryptography you don't even know the names of pieces of software, you should leave this kind of work to others rather than generate a series of questionable CVEs that you'll argue over like it's the Reddit comment section?
Why would someone go back and audit Truecrypt when Truecrypt was subjected to an audit, and then the resultant code open sourced:
https://en.wikipedia.org/wiki/VeraCrypt#VeraCrypt_audit
Maybe if you know so little about cryptography you don't even know the names of pieces of software, you should leave this kind of work to others rather than generate a series of questionable CVEs that you'll argue over like it's the Reddit comment section?