CVE-2026-31789 — Out-of-bounds Write in Openssl
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 98.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 7
Latest updateApr 9
Description
Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.
Impact summary: A heap buffer overflow may lead to a crash or possibly
an attacker controlled code execution or other undefined behavior.
If an attacker can supply a crafted X.509 certificate with an excessively
large OCTET STRING value in extensions such as the Subject Key Identifier
(SKID) or Authority Key Identifier (AKID) which are being converted t…
Affected Packages5 packages
🔴Vulnerability Details
3GHSA▶
GHSA-j79m-9jxq-788r: Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a heap buffer overflow on 32 bit platforms↗2026-04-08
OSV▶
CVE-2026-31789: Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a heap buffer overflow on 32 bit platforms↗2026-04-07
OSV▶
CVE-2026-31789: Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms↗2026-04-07
📋Vendor Advisories
5🕵️Threat Intelligence
8💬Community
1Bugzilla▶
CVE-2026-31789 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing↗2026-03-25