GHSA-xmgf-hq76-4vx2
NoneCVSS
—
EPSS
—
Published
Apr 22, 2026
CISA due date
—
The record
rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | openssl | 0.9.0 | 0.10.78 |
Related vulnerabilities
- CVE-2026-41677 rust-openssl provides OpenSSL bindings for the Rust programming language. Same vulnerability
- GHSA-phqj-4mhp-q6mq rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for… Also affects openssl
- CVE-2026-45784 rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for… Also affects openssl
- CVE-2026-44662 rust-openssl provides OpenSSL bindings for the Rust programming language. Also affects openssl
- CVE-2026-42327 rust-openssl provides OpenSSL bindings for the Rust programming language. Also affects openssl
- GHSA-xv59-967r-8726 rust-openssl vulnerable to heap buffer overflow when encrypting with AES… Also affects openssl
- GHSA-xp3w-r5p5-63rr rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with… Also affects openssl
- CVE-2026-41676 rust-openssl provides OpenSSL bindings for the Rust programming language. Also affects openssl