rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

🗓️ 22 Apr 2026 21:22:00Reported by GitHub Advisory DatabaseType

Deriver and PkeyCtxRef derive on OpenSSL 1.1.1 may overflow buffers by writing full secret.

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses openssl-0.10.76.crate which is vulnerable to CVE-2026-41676, CVE-2026-41677, CVE-2026-41678, CVE-2026-41681	29 May 202609:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	26 May 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of openssl (CVE-2026-41676, CVE-2026-41677, CVE-2026-41678, CVE-2026-41681)	17 May 202621:24	–	ibm
ATTACKERKB	CVE-2026-41676	24 Apr 202617:16	–	attackerkb
Chainguard	CVE-2026-41676 vulnerabilities	23 Apr 202619:27	–	cgr
Circl	CVE-2026-41676	24 Apr 202619:23	–	circl
CNNVD	rust-openssl 安全漏洞	24 Apr 202600:00	–	cnnvd
CVE	CVE-2026-41676	24 Apr 202617:16	–	cve
Cvelist	CVE-2026-41676 rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1	24 Apr 202617:16	–	cvelist
Debian CVE	CVE-2026-41676	24 Apr 202617:16	–	debiancve

Vulners

Node

openssl opensslRange0.9.27–0.10.78rust

Source	Link
github	www.github.com/rust-openssl/rust-openssl/security/advisories/GHSA-pqf5-4pqq-29f5
github	www.github.com/rust-openssl/rust-openssl/pull/2606
github	www.github.com/rust-openssl/rust-openssl/commit/09b425e5f59a2466d806e71a83a9a449c914c596
github	www.github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41676
github	www.github.com/advisories/GHSA-pqf5-4pqq-29f5

27 Apr 2026 16:42Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

CVSS 49.2

EPSS0.00066

SSVC