CVE-2026-9076

설명

Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. There is no information disclosure as the over-read bytes are not revealed to the attacker. The key unwrapping function performs a check-byte test as specified in the RFC that read...

영향 제품·버전

제품 OpenSSL OpenSSL, openssl

영향 버전 OpenSSL OpenSSL, openssl >= 4.0.0 < 4.0.1, >= 3.6.0 < 3.6.3, >= 3.5.0 < 3.5.7, >= 3.4.0 < 3.4.6, >= 3.0.0 < 3.0.21, >= 1.1.1 < 1.1.1zh, >= 1.0.2 < 1.0.2zq, 4.0.0

수정 버전 OpenSSL OpenSSL, openssl 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3

기술 정보

CVSS 벡터 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE CWE-125