CVE-2026-7383

OpenSSL is vulnerable to a signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() . This occurs because the destination size for BMPSTRING (UTF-16), UNIVERSALSTRING (UTF-32), and UTF8STRING is computed using signed integers, which can overflow when ...