2 matches found
openssl: Fix of 5 CVEs
CVE-2026-7383: fix signed integer overflow when sizing Unicode output in ASN1mbstringncopy - CVE-2026-9076: fix heap out-of-bounds read in kekunwrapkey check-byte validation - CVE-2026-28388: fix NULL pointer dereference when delta CRL lacks the CRL Number extension - CVE-2026-34180: avoid length...
8.1CVSS6.3AI score0.0106EPSS
SaveExploits0References5
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the kekunwrapkey function. An attacker can cause application instability, crash, or potentially execute arbitrary code by sending CMS messages encrypted using password based encryption to trigger out-of-bounds...
8.2CVSS8AI score0.01549EPSS
SaveExploits0References3
20