JLSEC-2026-263 Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file...

🗓️ 27 Apr 2026 18:33:55Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Calling PKCS12_get_friendlyname on a crafted PKCS#12 can trigger a one-byte write before the allocated buffer during BMPString to UTF-8 conversion, enabling denial of service.

Reporter	Title	Published	Views	Family All 331
IBM Security Bulletins	Security Bulletin: IBM i is affected by multiple vulnerabilities in OpenSSL	17 Mar 202621:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance	16 Apr 202611:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in openssl affects IBM Netezza Appliance	12 May 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	29 Apr 202611:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple CVEs (CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796)	2 Mar 202611:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX/VIOS due to OpenSSL	9 Mar 202621:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	21 May 202614:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL	13 Apr 202618:02	–	ibm
FreeBSD	OpenSSL -- Multiple vulnerabilities	27 Jan 202600:00	–	freebsd
ATTACKERKB	CVE-2025-69419	27 Jan 202616:01	–	attackerkb

Source	Link
github	www.github.com/advisories/GHSA-x77r-97gw-wh89
github	www.github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296
github	www.github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb
github	www.github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2
github	www.github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015
github	www.github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-69419
openssl-library	www.openssl-library.org/news/secadv/20260127.txt

27 Apr 2026 19:02Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.4

EPSS0.00115