Out-of-bounds read & write in RFC 3211 KEK Unwrap

🗓️ 30 Sep 2025 00:00:00Reported by OpenSSLType

Out-of-bounds read/write in OpenSSL RFC 3211 KEK Unwrap enables DoS or code execution.

Reporter	Title	Published	Views	Family All 524
FreeBSD	OpenSSL -- multiple vulnerabilities	30 Sep 202500:00	–	freebsd
FreeBSD	LibreSSL -- overwrite and -read vulnerability	1 Oct 202500:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in IBM CICS TX Standard.	22 Apr 202614:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	17 Dec 202514:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	25 Feb 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in openssl library (CVE-2025-9230) affects Power HMC.	31 Mar 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance	16 Apr 202611:32	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities found in the Red Hat Universal Minimal Base Image shipped with CICS Transaction Gateway for Multiplatforms	5 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm

Vulners

Node

openssl opensslRange3.5.0–3.5.4

openssl opensslRange3.4.0–3.4.3

openssl opensslRange3.3.0–3.3.5

openssl opensslRange3.2.0–3.2.6

openssl opensslRange3.0.0–3.0.18

openssl opensslRange1.1.1–1.1.1zd

openssl opensslRange1.0.2–1.0.2zm

30 Sep 2025 00:00Current

CVSS 3.17.5

EPSS0.01554

SSVC