CVE-2026-54876

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim clien...

CVE-2026-54876

The CVE-2026-54876 issue describes a memory-leak vulnerability in TLS clients with OCSP response checking enabled. When a malicious TLS server sends an OCSP response containing no SingleResponse entries, the BasicOCSPResponse structure allocated by OCSP_response_get1_basic() is not freed due to a...