K000163708: rust-openssl vulnerability CVE-2026-45784

Security Advisory Description rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers...

OpenSSL cipher_update_inplace Data Compromise

The vulnerability of the cipherupdateinplace function in the openssl/src/cipherctx.rs module of the OpenSSL library is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

CVE-2026-45784: Incorrect Calculation of Buffer Size

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVPaes128,192,256wrappad. For a non-multiple-of-8...