The vulnerability of the select_next_proto() function in the OpenSSL library for the Rust programming language allows a perpetrator to trigger a service failure.

The vulnerability of the selectnextproto function in the OpenSSL library for the Rust programming language is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

rust openssl ssl::select_next_proto use after free

...

CVE-2025-24898 rust openssl ssl::select_next_proto use after free

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

ssl::select_next_proto use after free

In openssl versions before 0.10.70, ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the server buffer's lifetime is shorter than the client buffer's, this can cause a use after free. This coul...