Report feedback

Due to a write beyond the bounds of allocated stack memory when processing encrypted CMS messages with AEAD ciphers, an unauthenticated remote attacker can cause a DoS attack or potentially achieve remote code execution [1].

The vulnerability is present in product:

• OpenSSL; >=3.6, <3.6.1; >=3.5, <3.5.5; >=3.4, <3.4.4; >=3.3, <3.3.6; >=3.0, <3.0.19

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2025-15467 at cve.org, NVD
• CWE-787: Out-of-bounds Write at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.

When processing specially crafted PKCS#12 files, due to insufficient validation of input parameters, an authenticated local attacker can cause a DoS attack or potentially code execution [1].

The vulnerability is present in product:

• OpenSSL; >=3.4.0, <3.4.4; >=3.5.0, <3.5.5; >=3.6.0, <3.6.1

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

More information:

• CVE-2025-11187 at cve.org, NVD
• CWE-787: Out-of-bounds Write at cwe.mitre.org
• CWE-476: NULL Pointer Dereference at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.

Due to insufficient size checking of compressed TLS 1.3 certificates, an unauthenticated remote attacker can trigger excessive memory allocation, which may lead to a DoS attack. A temporary mitigation is to disable the acceptance of compressed certificates by setting the SSL_OP_NO_RX_CERTIFICATE_COMPRESSION option [1].

The vulnerability is present in product:

• OpenSSL; >=3.3.0, <3.3.6; >=3.4.0, <3.4.4; >=3.5.0, <3.5.5; >=3.6.0, <3.6.1

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

• CVE-2025-66199 at cve.org, NVD
• CWE-789: Memory Allocation with Excessive Size Value at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.