Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

rust-openssl vulnerabilities

8 published CVEs name rust-openssl among the affected products.

Newest CVEs

  • CVE-2026-45784

    rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

    rust-openssl · rust-openssl

    Medium5.1
  • CVE-2026-44662

    rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding

    rust-openssl · rust-openssl

    Medium5.1
  • CVE-2026-42327

    rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

    rust-openssl · rust-openssl

    High8.7
  • CVE-2026-41898

    rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer

    rust-openssl · rust-openssl

    High8.3
  • CVE-2026-41681

    rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check

    rust-openssl · rust-openssl

    High8.1
  • CVE-2026-41678

    rust-openssl: Incorrect bounds assertion in aes key wrap

    rust-openssl · rust-openssl

    High7.2
  • CVE-2026-41677

    rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length

    rust-openssl · rust-openssl

    Low1.7
  • CVE-2026-41676

    rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

    rust-openssl · rust-openssl

    High7.2