RUSTSEC-2026-0479

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2026-0479

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0479.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2026-0479

Aliases

Published

2026-04-19T12:00:00Z

Modified

2026-11-10T14:00:02Z

Summary

Out-of-bounds read when a PEM password callback returns an oversized length

Details

The *_from_pem_callback functions, such as EcKey::private_key_from_pem_callback, pass the length returned by the user's password callback to OpenSSL without checking it against the size of the buffer the callback was given. If the callback reports more bytes than the buffer holds, some OpenSSL versions read past the end of the buffer while deriving the decryption key. OpenSSL 3.x is not affected.

0.10.78 treats a returned length larger than the buffer as a failed callback.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / openssl

Package

Name: openssl; View open source insights on deps.dev
Purl: pkg:cargo/openssl

Affected ranges

Type: SEMVER
Events: Introduced

0.9.0

Fixed

0.10.78

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}