UpHeron
All vulnerabilities

Servers and applications

CVE-2026-34180

Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial of Service) or to load into the decoded ASN.1 object contents of memory beyond the end of the input buffer. More…

Severity
High 7.5
Published
9 Jun 2026
Last changed
23 Jul 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 4.0.0
  • From 3.6.0 before 3.6.3
  • From 3.5.0 before 3.5.7
  • From 3.4.0 before 3.4.6
All 7 release lines
  • From 1.0.2 before 1.0.2zq
  • From 1.1.1 before 1.1.1zh
  • From 3.0.0 before 3.0.21
  • From 3.4.0 before 3.4.6
  • From 3.5.0 before 3.5.7
  • From 3.6.0 before 3.6.3
  • Version 4.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-34180
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-34180