Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

🗓️ 07 Apr 2026 00:00:00Reported by OpenSSLType

OpenSSL NULL dereference in CMS KeyAgreeRecipientInfo processing enables DoS via crafted messages.

Reporter	Title	Published	Views	Family All 213
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	1 Jul 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By NULL Pointer Dereference, Use Afer Free, and Out-of-Bounds Write Vulnerabilities in OpenSSL [CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-28387, CVE-2026-31789]	8 Jun 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL	4 May 202622:03	–	ibm
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1586)	13 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssl11, --advisory ALAS2-2026-3249 (ALAS-2026-3249)	14 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssl, --advisory ALAS2-2026-3274 (ALAS-2026-3274)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : edk2, --advisory ALAS2-2026-3275 (ALAS-2026-3275)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssl-snapsafe, --advisory ALAS2OPENSSL-SNAPSAFE-2026-010 (ALASOPENSSL-SNAPSAFE-2026-010)	30 Apr 202600:00	–	nessus
Tenable Nessus	Debian dla-4624 : libcrypto1.1-udeb - security update	9 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6201 : libcrypto3-udeb - security update	21 Apr 202600:00	–	nessus

Vulners

Node

openssl opensslRange3.6.0–3.6.2

openssl opensslRange3.5.0–3.5.6

openssl opensslRange3.4.0–3.4.5

openssl opensslRange3.3.0–3.3.7

openssl opensslRange3.0.0–3.0.20

openssl opensslRange1.1.1–1.1.1zg

openssl opensslRange1.0.2–1.0.2zp

07 Apr 2026 00:00Current

CVSS 3.17.5

EPSS0.00805

SSVC