CVE-2026-22796
published 2026-01-27CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without…
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.50%
39.6th percentile
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
this results in accessing invalid memory through the ASN1_TYPE union, causing
a crash.
Exploiting this vulnerability requires an attacker to provide a malformed
signed PKCS#7 to an application that verifies it. The impact of the
exploit is just a Denial of Service, the PKCS7 API is legacy and applications
should be using the CMS API instead. For these reasons the issue was
assessed as Low severity.
The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,
as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module
boundary.
OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openssl | < openssl 3.0.18-1~deb12u2 (bookworm) | openssl 3.0.18-1~deb12u2 (bookworm) |
| openssl | openssl | >= 0 < 3.0.19-r0 | 3.0.19-r0 |
| openssl | openssl | >= 0 < 3.3.6-r0 | 3.3.6-r0 |
| openssl | openssl | >= 0 < 3.3.6-r0 | 3.3.6-r0 |
| openssl | openssl | >= 0 < 3.5.5-r0 | 3.5.5-r0 |
| openssl | openssl | >= 0 < 3.5.5-r0 | 3.5.5-r0 |
| openssl | openssl | >= 0 < 1.1.1w-0+deb11u5 | 1.1.1w-0+deb11u5 |
| openssl | openssl | >= 0 < 3.0.18-1~deb12u2 | 3.0.18-1~deb12u2 |
| openssl | openssl | >= 0 < 3.5.4-1~deb13u2 | 3.5.4-1~deb13u2 |
| openssl | openssl | >= 0 < 3.5.5-1 | 3.5.5-1 |
| openssl | openssl | >= 0 < 3.0.2-0ubuntu1.21 | 3.0.2-0ubuntu1.21 |
| openssl | openssl | >= 0 < 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.7 |
| openssl | openssl | >= 0 < 3.5.3-1ubuntu3 | 3.5.3-1ubuntu3 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.27+esm12 | 1.0.1f-1ubuntu2.27+esm12 |
| openssl | openssl | >= 0 < 1.0.2g-1ubuntu4.20+esm14 | 1.0.2g-1ubuntu4.20+esm14 |
| openssl | openssl | >= 0 < 1.1.1-1ubuntu2.1~18.04.23+esm7 | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| openssl | openssl | >= 0 < 1.1.1f-1ubuntu2.24+esm2 | 1.1.1f-1ubuntu2.24+esm2 |
| openssl | openssl | >= 0 < 1.1.1-1ubuntu2.fips.2.1~18.04.23.7 | 1.1.1-1ubuntu2.fips.2.1~18.04.23.7 |
| openssl | openssl | >= 0 < 1.1.1f-1ubuntu2.fips.24.2 | 1.1.1f-1ubuntu2.fips.24.2 |
| openssl | openssl | >= 0 < 3.0.2-0ubuntu1.21+Fips1 | 3.0.2-0ubuntu1.21+Fips1 |
| openssl | openssl | >= 0 < 1.0.2g-1ubuntu4.fips.4.20.14 | 1.0.2g-1ubuntu4.fips.4.20.14 |
| openssl | openssl | >= 1.0.2 < 1.0.2zn | 1.0.2zn |
| openssl | openssl | >= 1.1.1 < 1.1.1ze | 1.1.1ze |
| openssl | openssl | >= 3.0.0 < 3.0.19 | 3.0.19 |
| openssl | openssl | >= 3.3.0 < 3.3.6 | 3.3.6 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
osv6.1MEDIUM
vendor_ubuntu6.1MEDIUM
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
OpenSSL up to 3.6.0 PKCS#7 PKCS7_digest_from_attributes unusual condition (Nessus ID 296784 / WID-SEC-2026-0234)
vuldb·2026-06-21·CVSS 5.3
CVE-2026-22796 [MEDIUM] OpenSSL up to 3.6.0 PKCS#7 PKCS7_digest_from_attributes unusual condition (Nessus ID 296784 / WID-SEC-2026-0234)
A vulnerability has been found in OpenSSL up to 3.6.0 and classified as problematic. The impacted element is the function PKCS7_digest_from_attributes of the component PKCS#7 Handler. The manipulation leads to improper check for unusual conditions.
This vulnerability is documented as CVE-2026-22796. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
OSV
CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed w
osv·2026-01-27·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed w
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requir
OSV
openssl, openssl1.0 vulnerabilities
osv·2026-01-27·CVSS 6.1
CVE-2025-68160 [MEDIUM] openssl, openssl1.0 vulnerabilities
openssl, openssl1.0 vulnerabilities
USN-7980-2 fixed vulnerabilities in OpenSSL. This update provides the
corresponding updates for CVE-2025-68160 for openssl and openssl1.0,
CVE-2025-69418 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69419 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69420 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69421 for openssl and openssl1.0, CVE-2026-22795 for openssl on
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, and CVE-2026-22796 for openssl and
openssl1.0.
Original advisory details:
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL
incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC
verification. An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a deni
OSV
openssl vulnerabilities
osv·2026-01-27·CVSS 6.1
CVE-2025-11187 [MEDIUM] openssl vulnerabilities
openssl vulnerabilities
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL
incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC
verification. An attacker could possibly use this issue to cause OpenSSL to
crash, resulting in a denial of service. This issue only affected Ubuntu
25.10. (CVE-2025-11187)
Stanislav Fort discovered that OpenSSL incorrectly parsed CMS
AuthEnvelopedData messages. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. (CVE-2025-15467)
Stanislav Fort discovered that OpenSSL incorrectly handled memory in the
SSL_CIPHER_find() function. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. This issue only
affected Ubuntu 25.10. (CVE-2025-15468)
St
OSV
CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed w
osv·2026-01-27·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed w
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
this results in accessing invalid memory through the ASN1_TYPE union, causing
a crash.
Exploiting this vulnerability req
OSV
CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed w
osv·2026-01-27·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed w
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requir
GHSA
GHSA-r9hf-rxjm-gv2f: Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed w
ghsa_unreviewed·2026-01-27
CVE-2026-22796 [MEDIUM] CWE-754 GHSA-r9hf-rxjm-gv2f: Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed w
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
this results in accessing invalid memory through the ASN1_TYPE union, causing
a crash.
Exploiting this vulnerability req
Red Hat
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
vendor_redhat·2026-01-27·CVSS 5.3
CVE-2026-22796 [MEDIUM] CWE-1287 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
this results in accessing invalid
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2026-01-27·CVSS 6.1
CVE-2025-69419 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
USN-7980-1 fixed vulnerabilities in OpenSSL. This update provides the
corresponding updates for CVE-2025-68160 for openssl and openssl1.0,
CVE-2025-69418 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69419 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69420 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS,
CVE-2025-69421 for openssl and openssl1.0, CVE-2026-22795 for openssl on
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, and CVE-2026-22796 for openssl and
openssl1.0.
Original advisory details:
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL
incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC
verification. An attacker could possibly use this
BSD
FreeBSD-SA-26:01.openssl: Multiple vulnerabilities in OpenSSL
bsd_advisories·2026-01-27·CVSS 6.1
CVE-2025-11187 [MEDIUM] FreeBSD-SA-26:01.openssl: Multiple vulnerabilities in OpenSSL
FreeBSD-SA-26:01.openssl Security Advisory
The FreeBSD Project
Topic: Multiple vulnerabilities in OpenSSL
Category: contrib
Module: openssl
Announced: 2026-01-27
Credits: Aisle Research
Affects: All supported versions of FreeBSD.
Corrected: 2026-01-27 19:14:58 UTC (stable/15, 15.0-STABLE)
2026-01-27 19:15:49 UTC (releng/15.0, 15.0-RELEASE-p2)
2026-01-27 19:15:10 UTC (stable/14, 14.3-STABLE)
2026-01-27 19:16:22 UTC (releng/14.3, 14.3-RELEASE-p8)
2026-01-27 19:15:19 UTC (stable/13, 13.4-STABLE)
2026-01-27 19:16:45 UTC (releng/13.5, 13.5-RELEASE-p9)
CVE Name: CVE-2025-11187, CVE-2025-15467, CVE-2025-15468,
CVE-2025-15469, CVE-2025-66199, CVE-2025-68160,
CVE-2025-69418, CVE-2025-69419, CVE-2025-69420,
CVE-2025-69421, CVE-2026-22795, CVE-2026-22796
For general information regarding FreeBSD S
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2026-01-27·CVSS 6.1
CVE-2025-66199 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL
incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC
verification. An attacker could possibly use this issue to cause OpenSSL to
crash, resulting in a denial of service. This issue only affected Ubuntu
25.10. (CVE-2025-11187)
Stanislav Fort discovered that OpenSSL incorrectly parsed CMS
AuthEnvelopedData messages. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. (CVE-2025-15467)
Stanislav Fort discovered that OpenSSL incorrectly handled memory in the
SSL_CIPHER_find() function. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of serv
Debian
CVE-2026-22796: openssl - Issue summary: A type confusion vulnerability exists in the signature verificati...
vendor_debian·2026·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796: openssl - Issue summary: A type confusion vulnerability exists in the signature verificati...
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requir
No detection rules found.
No public exploits indexed.
Wiz
CVE-2025-15469 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.5
CVE-2025-15469 [MEDIUM] CVE-2025-15469 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-15469 :
OpenSSL vulnerability analysis and mitigation
Issue summary: The 'openssl dgst' command-line tool silently truncates input
data to 16MB when using one-shot signing algorithms and reports success instead
of an error.
Impact summary: A user signing or verifying files larger than 16MB with
one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire
file is authenticated while trailing data beyond 16MB remains unauthenticated.
When the 'openssl dgst' command is used with algorithms that only support
one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input
is buffered with a 16MB limit. If the input exceeds this limit, the tool
silently truncates to the first 16MB and continues without signaling an error,
contrary to what the docum
Wiz
CVE-2026-2673 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2026-2673 [HIGH] CVE-2026-2673 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-2673 :
OpenSSL vulnerability analysis and mitigation
Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected
preferred key exchange group when its key exchange group configuration includes
the default by using the 'DEFAULT' keyword.
Impact summary: A less preferred key exchange may be used even when a more
preferred group is supported by both client and server, if the group
was not included among the client's initial predicated keyshares.
This will sometimes be the case with the new hybrid post-quantum groups,
if the client chooses to defer their use until specifically requested by
the server.
If an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to
interpolate the built-in default group list into its own configuration, perhaps
adding o
Wiz
CVE-2025-69421 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2025-69421 [HIGH] CVE-2025-69421 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-69421 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer
dereference in the PKCS12_item_decrypt_d2i_ex() function.
Impact summary: A NULL pointer dereference can trigger a crash which leads to
Denial of Service for an application processing PKCS#12 files.
The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct
parameter is NULL before dereferencing it. When called from
PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can
be NULL, causing a crash. The vulnerability is limited to Denial of Service
and cannot be escalated to achieve code execution or memory disclosure.
Exploiting this issue requires an attacker to provide a malformed PKCS#12 file
to an applicatio
Wiz
CVE-2026-22796 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-22796 :
OpenSSL vulnerability analysis and mitigation
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
this results in accessing invalid memory through the
Wiz
CVE-2025-15468 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.9
CVE-2025-15468 [MEDIUM] CVE-2025-15468 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-15468 :
OpenSSL vulnerability analysis and mitigation
Issue summary: If an application using the SSL_CIPHER_find() function in
a QUIC protocol client or server receives an unknown cipher suite from
the peer, a NULL dereference occurs.
Impact summary: A NULL pointer dereference leads to abnormal termination of
the running process causing Denial of Service.
Some applications call SSL_CIPHER_find() from the client_hello_cb callback
on the cipher ID received from the peer. If this is done with an SSL object
implementing the QUIC protocol, NULL pointer dereference will happen if
the examined cipher ID is unknown or unsupported.
As it is not very common to call this function in applications using the QUIC
protocol and the worst outcome is Denial of Service, the issue was assesse
Wiz
CVE-2025-11187 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.1
CVE-2025-11187 [MEDIUM] CVE-2025-11187 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-11187 :
OpenSSL vulnerability analysis and mitigation
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation
which can trigger a stack-based buffer overflow, invalid pointer or NULL
pointer dereference during MAC verification.
Impact summary: The stack buffer overflow or NULL pointer dereference may
cause a crash leading to Denial of Service for an application that parses
untrusted PKCS#12 files. The buffer overflow may also potentially enable
code execution depending on platform mitigations.
When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2
salt and keylength parameters from the file are used without validation.
If the value of keylength exceeds the size of the fixed stack buffer used
for the derived key (64 bytes), the key derivation
Wiz
CVE-2025-15467 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.8
CVE-2025-15467 [HIGH] CVE-2025-15467 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-15467 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with
maliciously crafted AEAD parameters can trigger a stack buffer overflow.
Impact summary: A stack buffer overflow may lead to a crash, causing Denial
of Service, or potentially remote code execution.
When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as
AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is
copied into a fixed-size stack buffer without verifying that its length fits
the destination. An attacker can supply a crafted CMS message with an
oversized IV, causing a stack-based out-of-bounds write before any
authentication or tag verification occurs.
Applications and services that parse untruste
Wiz
CVE-2025-69420 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2025-69420 [HIGH] CVE-2025-69420 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-69420 :
OpenSSL vulnerability analysis and mitigation
Issue summary: A type confusion vulnerability exists in the TimeStamp Response
verification code where an ASN1_TYPE union member is accessed without first
validating the type, causing an invalid or NULL pointer dereference when
processing a malformed TimeStamp Response file.
Impact summary: An application calling TS_RESP_verify_response() with a
malformed TimeStamp Response can be caused to dereference an invalid or
NULL pointer when reading, resulting in a Denial of Service.
The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()
access the signing cert attribute value without validating its type.
When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory
through the ASN1_TYPE un
Wiz
CVE-2025-69419 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.4
CVE-2025-69419 [HIGH] CVE-2025-69419 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-69419 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously
crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing
non-ASCII BMP code point can trigger a one byte write before the allocated
buffer.
Impact summary: The out-of-bounds write can cause a memory corruption
which can have various consequences including a Denial of Service.
The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12
BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,
the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16
source byte count as the destination buffer capacity to UTF8_putc(). For BMP
code points above U+07FF, UTF-8 requires three bytes,
Wiz
CVE-2025-66199 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.9
CVE-2025-66199 [MEDIUM] CVE-2025-66199 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-66199 :
OpenSSL vulnerability analysis and mitigation
Issue summary: A TLS 1.3 connection using certificate compression can be
forced to allocate a large buffer before decompression without checking
against the configured certificate size limit.
Impact summary: An attacker can cause per-connection memory allocations of
up to approximately 22 MiB and extra CPU work, potentially leading to
service degradation or resource exhaustion (Denial of Service).
In affected configurations, the peer-supplied uncompressed certificate
length from a CompressedCertificate message is used to grow a heap buffer
prior to decompression. This length is not bounded by the max_cert_list
setting, which otherwise constrains certificate message sizes. An attacker
can exploit this to cause large per-c
Wiz
CVE-2026-22795 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.5
CVE-2026-22795 [MEDIUM] CVE-2026-22795 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-22795 :
OpenSSL vulnerability analysis and mitigation
Issue summary: An invalid or NULL pointer dereference can happen in
an application processing a malformed PKCS#12 file.
Impact summary: An application processing a malformed PKCS#12 file can be
caused to dereference an invalid or NULL pointer on memory read, resulting
in a Denial of Service.
A type confusion vulnerability exists in PKCS#12 parsing code where
an ASN1_TYPE union member is accessed without first validating the type,
causing an invalid pointer read.
The location is constrained to a 1-byte address space, meaning any
attempted pointer manipulation can only target addresses between 0x00 and 0xFF.
This range corresponds to the zero page, which is unmapped on most modern
operating systems and will reliably resul
Wiz
CVE-2025-68160 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.7
CVE-2025-68160 [MEDIUM] CVE-2025-68160 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-68160 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Writing large, newline-free data into a BIO chain using the
line-buffering filter where the next BIO performs short writes can trigger
a heap-based out-of-bounds write.
Impact summary: This out-of-bounds write can cause memory corruption which
typically results in a crash, leading to Denial of Service for an application.
The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in
TLS/SSL data paths. In OpenSSL command-line applications, it is typically
only pushed onto stdout/stderr on VMS systems. Third-party applications that
explicitly use this filter with a BIO chain that can short-write and that
write large, newline-free data influenced by an attacker would be affected.
However, the cir
Bugzilla
CVE-2026-22796 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
bugzilla·2026-01-16·CVSS 5.3
CVE-2026-22796 [MEDIUM] CVE-2026-22796 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
CVE-2026-22796 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
Severity: Low
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an invalid or NULL
pointer dereference when processing malformed PKCS#7 data.
Impact summary: An application performing signature verification of PKCS#7
data or calling directly the PKCS7_digest_from_attributes() function can be
caused to dereference an invalid or NULL pointer when reading, resulting in
a Denial of Service.
The function PKCS7_digest_from_attributes() accesses the message digest attribute
value without validating its type. When the type is not V_ASN1_OCTET_STRING,
th
https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373ehttps://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2https://openssl-library.org/news/secadv/20260127.txthttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
2026-01-27
Published