openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

🗓️ 17 Aug 2026 09:22:07Reported by RedHatType

redhat🔗 access.redhat.com👁 2 Views

Unauthenticated heap buffer over-read in OpenSSL ASN.1 decoding, DoS or information disclosure.

Reporter	Title	Published	Views	Family All 269
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple CVEs	14 Sep 202609:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple critical vulnerabilities in OpenSSL, Java SE, and Jetty	11 Aug 202609:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	17 Sep 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	24 Aug 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL	14 Jul 202622:25	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL	22 Jul 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	8 Jul 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	1 Jul 202622:38	–	ibm
FreeBSD	OpenSSL -- Multiple vulnerabilities	9 Jun 202600:00	–	freebsd

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Hardened Images	any	aarch64	python3-cryptography	50.0.0-1.hum1	python3-cryptography-50.0.0-1.hum1.aarch64.rpm
Red Hat Hardened Images	any	x86_64	python3-cryptography	50.0.0-1.hum1	python3-cryptography-50.0.0-1.hum1.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-34180
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34180
cve	www.cve.org/CVERecord

24 Sep 2026 16:41Current

6Medium risk

Vulners AI Score6

EPSS0.01311

SSVC

OpenSSL heap buffer over-read ASN.1 decoder DoS information disclosure Unix