Rrust-openssl

Products

Exploited and recent CVEs

• CVE-2026-45784 Medium 5.1 rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 0.1%
• CVE-2026-44662 Medium 5.1 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 0.2%
• CVE-2026-42327 High 8.7 rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 0.2%
• CVE-2026-41898 High 8.3 rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 0.3%
• CVE-2026-41681 High 8.1 rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 0.4%
• CVE-2026-41678 High 7.2 rust-openssl: Incorrect bounds assertion in aes key wrap 0.3%
• CVE-2026-41677 Low 1.7 rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 0.3%
• CVE-2026-41676 High 7.2 rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 0.3%