Количество 23
Количество 23
CVE-2026-7383
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu...
CVE-2026-7383
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu...
CVE-2026-7383
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu
CVE-2026-7383
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
CVE-2026-7383
Issue summary: A signed integer overflow when sizing the destination b ...
GHSA-w853-v86g-gv7j
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the i...
SUSE-SU-2026:2614-1
Security update for openssl-1_1
SUSE-SU-2026:2405-1
Security update for openssl-1_1
SUSE-SU-2026:2404-1
Security update for openssl-1_1
SUSE-SU-2026:2403-1
Security update for openssl-1_1
SUSE-SU-2026:2392-1
Security update for openssl-1_1
SUSE-SU-2026:2399-1
Security update for openssl-1_0_0
SUSE-SU-2026:2396-1
Security update for openssl-1_0_0
SUSE-SU-2026:2598-1
Security update for openssl-3
SUSE-SU-2026:2397-1
Security update for openssl-3
SUSE-SU-2026:2393-1
Security update for openssl-3
SUSE-SU-2026:2648-1
Security update for openssl-3
openSUSE-SU-2026:21005-1
Security update for openssl-3
RLSA-2026:25239
Important: openssl security update
RLSA-2026:25237
Important: openssl security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-7383 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu... | CVSS3: 8.1 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-7383 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu... | CVSS3: 5.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-7383 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the inpu | CVSS3: 8.1 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | CVSS3: 8.1 | 1% Низкий | около 1 месяца назад |
| CVE-2026-7383 Issue summary: A signed integer overflow when sizing the destination b ... | CVSS3: 8.1 | 1% Низкий | около 2 месяцев назад |
| GHSA-w853-v86g-gv7j Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation. X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the i... | CVSS3: 8.1 | 1% Низкий | около 2 месяцев назад |
 | SUSE-SU-2026:2614-1 Security update for openssl-1_1 | около 1 месяца назад | ||
| SUSE-SU-2026:2405-1 Security update for openssl-1_1 | около 2 месяцев назад | ||
| SUSE-SU-2026:2404-1 Security update for openssl-1_1 | около 2 месяцев назад | ||
| SUSE-SU-2026:2403-1 Security update for openssl-1_1 | около 2 месяцев назад | ||
| SUSE-SU-2026:2392-1 Security update for openssl-1_1 | около 2 месяцев назад | ||
| SUSE-SU-2026:2399-1 Security update for openssl-1_0_0 | около 2 месяцев назад | ||
| SUSE-SU-2026:2396-1 Security update for openssl-1_0_0 | около 2 месяцев назад | ||
| SUSE-SU-2026:2598-1 Security update for openssl-3 | около 1 месяца назад | ||
| SUSE-SU-2026:2397-1 Security update for openssl-3 | около 2 месяцев назад | ||
| SUSE-SU-2026:2393-1 Security update for openssl-3 | около 2 месяцев назад | ||
| SUSE-SU-2026:2648-1 Security update for openssl-3 | около 1 месяца назад | ||
| openSUSE-SU-2026:21005-1 Security update for openssl-3 | около 1 месяца назад | ||
 | RLSA-2026:25239 Important: openssl security update | около 2 месяцев назад | ||
| RLSA-2026:25237 Important: openssl security update | около 2 месяцев назад |
Уязвимостей на страницу