CVE-2025-15467

CVE-2025-15467: تجاوز سعة المخزن المؤقت للمكدس في OpenSSL CMS AuthEnvelopedData نظرة عامة CVE-2025-15467 هي ثغرة أمنية خطيرة من نوع تجاوز سعة المخزن المؤقت للمكدس في كود تحليل CMS بناء جملة الرسائل المشفرة الخاص بـ OpenSSL. توجد الثغرة في دالة evpciphergetasn1aeadparams عند معالجة متجهات التهيئة...

SUSE CVE-2025-15467

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

CVE-2025-15467 Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

OpenSSL security vulnerabilities

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...