OSV 1.4.0 · github-reviewed · 修改于 2026-05-20 03:50
发布时间
2026-05-20 03:50
GitHub 审查时间
2026-05-20 03:50
NVD 发布时间
—
源文件
advisories/github-reviewed/2026/05/GHSA-phqj-4mhp-q6mq/GHSA-phqj-4mhp-q6mq.json
CipherCtxRef::cipher_update_inplace incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad). For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced.
This only impacts users using AES key-wrap-with-padding ciphers.
This method was missed in the fix for GHSA-xv59-967r-8726