UpHeron
All vulnerabilities

Servers and applications

CVE-2025-69420

Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to…

Severity
High 7.5
Published
27 Jan 2026
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.1.1 before 1.1.1ze
  • From 3.0.0 before 3.0.19
  • From 3.3.0 before 3.3.6
  • From 3.4.0 before 3.4.4
  • From 3.5.0 before 3.5.5
  • From 3.6.0 before 3.6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-69420
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-69420