Security Intel Hub 87+

OpenSSL CVE-2020-14182: CMS AuthEnvelopedData Auth Bypass Patch Analysis

OpenSSL CMS kek_unwrap_key Out-of-Bounds Read Vulnerability Fix

OpenSSL ASN1_STRING_set Length Truncation Vulnerability Fix Analysis

OpenSSL AES-GCM-SIV/AES-SIV Empty Ciphertext Handling Vulnerability Fix Analysis

OpenSSL NULL Dereference Fix in Certificate Verification with OCSP and Partial Chain

OpenSSL Out-of-bounds Read Fix in CMS Module (CVE-2020-3078)

OpenSSL 4.0.1 PKCS7_verify Use-After-Free Vulnerability Fix

OpenSSL 4.0.1 DH key exchange q-value validation fix

OpenSSL 3.0.6 DH Key Exchange q Parameter Validation Flaw and Fix

OpenSSL QUIC PATH_CHALLENGE Memory Exhaustion Fix

OpenSSL Root CA Key Update Verification Flaw and NULL Dereference Fix

OpenSSL ASN1 Integer Overflow Leading to Heap Buffer Overflow and Fix

### Vulnerability Overview A defect in the calculation of the target buffer size in the `ASN1_mSTRING_n2c()` function leads to an integer overflow. Specifically, the calculation of `outlen` (`nchar IN…

OpenSSL DH Key Exchange Parameter Validation Bypass Vulnerability Analysis

OpenSSL CVE-2026-42787 NULL Dereference Fix in crmf_lib

OpenSSL CMS kek_unwrap_key Out-of-Bounds Read Vulnerability Fix Analysis

### Vulnerability Overview An out-of-bounds read vulnerability exists in the `kek_unwrap_key` function during byte validation checks. Specifically, the `check-byte` test unconditionally reads `tmp[i]`…

OpenSSL X509 Email Validation Length Miscalculation Fix Analysis