GHSA-6hcf-g6gr-hhcr

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

No scoreFix available

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

What each source reports

GitHub AdvisoriesNo score

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

Record: GHSA-6hcf-g6gr-hhcr
Weakness: CWE-476
Updated: 2026-11-02

OSVNo score

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

Record: GHSA-6hcf-g6gr-hhcr
Weakness: CWE-476
Updated: 2026-11-02

OSVRUSTSEC-2023-0024No score

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

Record: RUSTSEC-2023-0024
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`openssl` crates.io	0.9.7 up to 0.10.48	0.10.48
`openssl` crates.io	0.0.0-0 up to 0.10.48	0.10.48

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	GitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-6hcf-g6gr-hhcr is a vulnerability with no CVSS score yet in openssl, published March 24, 2023. No source lists public exploit code. Fixed in openssl 0.10.48.

What each source reports

Affected packages

History

In short

References