K000162458: Multiple WolfSSL vulnerabilities

Security Advisory Description CVE-2026-6679 A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized...

openssl: openssl-src: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

AZL-82100 CVE-2026-28388 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

AZL-81953 CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

EUVD-2014-6799

Malware in sbrugna...

EUVD-2014-7008

Malware in sbrugna...

EUVD-2014-6880

Malware in sbrugna...

EUVD-2014-6681

Malware in sbrugna...

EUVD-2012-2486

Malware in sbrugna...

EUVD-2014-5594

Malware in sbrugna...

EUVD-2017-18508

Malware in sbrugna...

EUVD-2014-7467

Malware in sbrugna...

EUVD-2014-7279

Malware in sbrugna...

EUVD-2014-0177

Malware in sbrugna...

EUVD-2019-15529

Malware in sbrugna...

EUVD-2014-5557

Malware in sbrugna...

EUVD-2013-1068

Malware in sbrugna...

EUVD-2014-7484

Malware in sbrugna...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the SCT extension parsing process. An attacker can access confidential information by providing a specially crafted certificate containing a malformed SCT extension during X.509 certificate verificatio...

CVE-2020-5521

The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...