~ / search / GHSA-pqf5-4pqq-29f5

GHSA-pqf5-4pqq-29f5

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

Source: GitHub Advisory Database (reviewed) High CVE-2026-41676

Packages

EcosystemPackageAffectedFixed in
crates.io openssl >= 0.9.27, < 0.10.78 0.10.78

Details

As written in the advisory (Markdown source, shown as plain text).

`Deriver::derive` (and `PkeyCtxRef::derive`) sets `len = buf.len()` and passes it as the in/out length to `EVP_PKEY_derive`, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming `*keylen`, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL.

References

External links from the advisory. They lead to third-party sites.