OpenSSL vulnerabilities
147 CVEs and advisories name OpenSSL as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-69419Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
- CVE-2025-69418Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
- CVE-2025-68160Heap out-of-bounds write in BIO_f_linebuffer on short writes
- CVE-2025-66199TLS 1.3 CompressedCertificate excessive memory allocation
- CVE-2025-15469'openssl dgst' one-shot codepath silently truncates inputs >16MB
- CVE-2025-15468NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
- CVE-2025-15467Stack buffer overflow in CMS (Auth)EnvelopedData parsing
- CVE-2025-11187Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
- CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handling
- CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARM
- CVE-2025-9230Out-of-bounds read & write in RFC 3211 KEK Unwrap
- CVE-2025-4575The x509 application adds trusted use instead of rejected use
- CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expected
- CVE-2024-13176Timing side-channel in ECDSA signature computation
- CVE-2024-4741Use After Free with SSL_free_buffers
- CVE-2024-9143Low-level invalid GF(2^m) parameters lead to OOB memory access
- CVE-2024-6119Possible denial of service in X.509 name checks
- CVE-2024-5535SSL_select_next_proto buffer overread
- CVE-2024-4603Excessive time spent checking DSA keys and parameters
- CVE-2023-6237Excessive time spent checking invalid RSA public keys
- CVE-2024-2511Unbounded memory growth with session handling in TLSv1.3
- CVE-2024-0727PKCS12 Decoding crashes
- CVE-2023-6129POLY1305 MAC implementation corrupts vector registers on PowerPC
- CVE-2023-5678Excessive time spent in DH check / generation with large Q parameter value
- CVE-2023-5363Incorrect cipher key & IV length processing
- CVE-2023-4807POLY1305 MAC implementation corrupts XMM registers on Windows
- CVE-2023-3817Excessive time spent checking DH q parameter value
- CVE-2023-3446Excessive time spent checking DH keys and parameters
- CVE-2023-2975AES-SIV implementation ignores empty associated data entries
- CVE-2023-2650Possible DoS translating ASN.1 object identifiers