What’s Vulnerable › Products

rust-openssl vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your rust-openssl version is affected

Latest rust-openssl vulnerabilities

• CVE-2026-44662 — rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding (CVSS 5.1)
• CVE-2026-42327 — rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs (CVSS 8.7)
• CVE-2026-41898 — rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer (CVSS 5.3)
• CVE-2026-41681 — rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check (CVSS 7.5)
• CVE-2026-41678 — rust-openssl: Incorrect bounds assertion in aes key wrap (CVSS 8.1)
• CVE-2026-41677 — rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length (CVSS 9.1)
• CVE-2026-41676 — rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 (CVSS 7.5)
• CVE-2018-20997 — (CVSS 9.8)
• CVE-2016-10931 — (CVSS 8.1)