rust-openssl vulnerabilities
8 published CVEs name rust-openssl among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45784
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers
rust-openssl · rust-openssl
Medium5.1 - CVE-2026-44662
rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding
rust-openssl · rust-openssl
Medium5.1 - CVE-2026-42327
rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
rust-openssl · rust-openssl
High8.7 - CVE-2026-41898
rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer
rust-openssl · rust-openssl
High8.3 - CVE-2026-41681
rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check
rust-openssl · rust-openssl
High8.1 - CVE-2026-41678
rust-openssl: Incorrect bounds assertion in aes key wrap
rust-openssl · rust-openssl
High7.2 - CVE-2026-41677
rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length
rust-openssl · rust-openssl
Low1.7 - CVE-2026-41676
rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1
rust-openssl · rust-openssl
High7.2