wolfi/libcrypto3

Vulnerabilities (60)

• CVE-2026-14456HigAug 13, 2026
  affected < 3.6.3-r5fixed 3.6.3-r5

  Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial pac

• CVE-2026-54876HigAug 5, 2026
  affected < 3.6.3-r4fixed 3.6.3-r4

  Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake

• CVE-2026-9076HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash w

• CVE-2026-7383HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefine

• CVE-2026-45447HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#

• CVE-2026-45446MedJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of such messages. Impact summary: An attacker can forge empty messages with arbitra

• CVE-2026-45445HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce re

• CVE-2026-42770LowJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r (a small

• CVE-2026-42769MedJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Auth

• CVE-2026-42768LowJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/or decryption output. Impact summary: The Bleichenbacher-style attack allows an

• CVE-2026-42767MedJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling

• CVE-2026-42766MedJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgori

• CVE-2026-42765HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer

• CVE-2026-42764HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server pro

• CVE-2026-35188MedJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verification path. Impact summary: Successful exploitation allows an attacker to corrupt he

• CVE-2026-34183HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the applica

• CVE-2026-34182CriJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilitie

• CVE-2026-34181HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user c

• CVE-2026-34180HigJun 9, 2026
  affected < 3.6.3-r0fixed 3.6.3-r0

  Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial

• CVE-2026-31790HigApr 7, 2026
  affected < 3.6.2-r0fixed 3.6.2-r0

  Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli