CVE-2026-54872

A flaw was found in OpenSSL. A timing side-channel vulnerability in generic elliptic curve scalar multiplication allows an attacker to recover private cryptographic keys. When performing signature operations, such as the Elliptic Curve Digital Signature Algorithm ECDSA or SM2, using curves withou...

CVE-2026-42772

A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service DoS by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these fram...

CVE-2026-75804

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS due to missing connection-level flow control enforcement in the QUIC protocol implementation. By opening multiple streams that respect individual stream limits while preventing data consumption, the attacker can forc...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the X.509 extension caching of CRL distribution points, which expands each nameRelativeToCRLIssuer entry into heap structures disproportionate to its encoded size. An attacker can...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ARM64 and RISC-V optimized SM2 scalar multiplication, which selects conditional branches and table lookups by secret scalar bits. An attacker can learn the long term private key or a per signature nonce by measuring...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the QUIC receive path, which holds a reference to the packet buffer until the application reads the stream data out of it. An attacker can hold that memory allocated for as long as...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation in the QUIC server's unvalidated amplification credit accounting, which adds the full datagram length once per QUIC packet it contains rather than once per datagram. An attacker can use the server as a DDoS...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the QUIC stream reassembly, which holds fragments in a doubly linked list optimized for appends and searches it head to tail when a fragment arrives out of order. An attacker can consume CPU...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the generic elliptic curve scalar multiplication used by ECDSA and SM2, which performs non constant time BIGNUM operations on a scalar derived from the secret nonce. An attacker can learn nonce information and recover t...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the X.509 extension cache, which computes the cache under a read lock and then installs the result under a write lock, so concurrent threads each install their own result and free the previous one while another thread...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the QUIC flow control enforcement, which applies the stream level window but not the connection level one. An attacker can force roughly 100 MB of allocation against a default 768 ...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the QUIC connection ID handling, which queues a RETIRECONNECTIONID frame on the control frame queue for every NEWCONNECTIONID frame received, without the limit that applies to usab...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the CMP client's handling of a revocation response, which compares the certificate named in the response against an issuer name and serial number that are unset when the revocation was requested by PKCS10 CSR...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the DTLS handshake retransmission handling, which reuses the existing buffer position when a retransmission timer fires during a write that paused mid-message, rather than resetting to the start of the message. An...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in the DTLS 1.2 record layer, which passes the record length to the cipher before checking that it covers the explicit IV and authentication tag, so an undersized record raises a fatal...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the handling of SSLsetSSLCTX called mid handshake, which switches the context without refreshing the recorded certificate slot count, so a replacement context recognizing more provider signature algorithms indexes...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in SM2 signature generation, which performs variable time BIGNUM operations on both the secret nonce and the private key. An attacker can learn nonce information and recover the private key through a lattice or Hidden Numb...

AZL-105567 CVE-2026-84782 affecting package openssl 3.3.7-6

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

AZL-105585 CVE-2026-84784 affecting package openssl 3.3.7-6

Issue summary: A malicious remote peer may flood the local QUIC stack with NEWCONNECTIONID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRECONNID frame for every NEWCONNECTIONID frame it receives. The...

CVE-2026-84782

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...