CVE-2025-15467

CVE-2025-15467 describes a stack buffer overflow in OpenSSL when parsing CMS AuthEnvelopedData/EnvelopedData with AEAD ciphers (e.g., AES-GCM). The issue occurs when the ASN.1 IV parameter is copied into a fixed-size stack buffer without length checks, allowing a crafted CMS message with an overs...

Linux Distros Unpatched Vulnerability : CVE-2025-15467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact...

OpenSSL security vulnerabilities

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...