Servers and applications
CVE-2025-15469
Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains…
- Severity
- Medium 5.5
- Published
- 27 Jan 2026
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.5.5, 3.6.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
OpenSSLServers and applications · cpe:a:openssl:openssl |
|