Rust-openssl vulnerabilities

Products

• Rust-openssl 9

Newest

• rust-openssl, sfackler openssl +1 more rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers CVE-2026-45784 Fix available 5.1 MediumMay 19, 2026
• rust-openssl rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding CVE-2026-44662 Fix available 5.1 MediumMay 7, 2026
• rust-openssl rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs CVE-2026-42327 Fix available 8.7 HighMay 5, 2026
• rust-openssl rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 CVE-2026-41676 Fix available 7.2 HighApril 22, 2026
• rust-openssl rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length CVE-2026-41677 Fix available 1.7 LowApril 22, 2026
• rust-openssl rust-openssl: Incorrect bounds assertion in aes key wrap CVE-2026-41678 Fix available 7.2 HighApril 22, 2026
• rust-openssl rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check CVE-2026-41681 Fix available 8.1 HighApril 22, 2026
• rust-openssl rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer CVE-2026-41898 Fix available 8.3 HighApril 22, 2026
• rust-openssl rust openssl ssl::select_next_proto use after free CVE-2025-24898 Fix available 6.3 MediumFebruary 2, 2025