5 matches found
AZL-75290 CVE-2025-69419 affecting package openssl for versions less than 3.3.5-3
Issue summary: Calling PKCS12getfriendlyname function on a maliciously crafted PKCS12 file with a BMPString UTF-16BE friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption...
7.4CVSS7.2AI score0.00444EPSS
SaveExploits1References1
20