UpHeron
All vulnerabilities

Servers and applications

CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a crafted CMS message can trigger a deterministic 8-byte out-of-bounds heap write when the victim…

Severity
High 7.5
Published
25 Aug 2026
Last changed
11 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.0.22, 3.4.7, 3.5.8, 3.6.4, 4.0.2
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 3.0.0 before 3.0.22
  • From 3.4.0 before 3.4.7
  • From 3.5.0 before 3.5.8
  • From 3.6.0 before 3.6.4
  • From 4.0.0 before 4.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-63072
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-63072