Beveiligingsadvies

CVE-2026-41681

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-24 17:19:15

Laatst bijgewerkt 2026-04-24 17:42:54

Toegewezen door GitHub_M

CVSS-score 8.1

Status PUBLISHED

Beschrijving

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78.

← Alle CVE's bekijken Bekijk op cve.org ↗