Vulnerability RUSTSEC-2026-0475
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 months ago
April 19, 2026 at 12:00 PM UTC
Buffer overflow in `MdCtxRef::digest_final`
>=0.10.39 <0.10.78
>=0.10.39 <0.10.78
Summary
Buffer overflow in `MdCtxRef::digest_final`
Details
MdCtxRef::digest_final passed the caller's output slice to OpenSSL's EVP_DigestFinal without checking its length. EVP_DigestFinal always writes the full digest (EVP_MD_CTX_size bytes), so an output slice shorter than the digest is overrun. With a stack buffer this usually corrupts the stack. The overflow is reachable from safe code.
MdCtxRef was added in 0.10.39. 0.10.78 checks the slice length first and returns an error when the slice is too short for the digest.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
5 months ago
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers
>=0.10.50 <0.10.80 GHSA-phqj-4mhp-q6mq
>=0.10.50 <0.10.80 GHSA-phqj-4mhp-q6mq
Unknown
5 months ago
Buffer overflow with AES key wrap with padding in `cipher_update_inplace`
>=0.10.50 <0.10.80 RUSTSEC-2026-0477
>=0.10.50 <0.10.80 RUSTSEC-2026-0477
Medium Risk
6 months ago
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding
>=0.10.0 <0.10.79 GHSA-xv59-967r-8726
>=0.10.0 <0.10.79 GHSA-xv59-967r-8726
High Risk
6 months ago
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
>=0.9.7 <0.10.79 GHSA-xp3w-r5p5-63rr
>=0.9.7 <0.10.79 GHSA-xp3w-r5p5-63rr
Unknown
6 months ago
`X509Ref::ocsp_responders` can produce a `&str` that is not valid UTF-8
>=0.9.7 <0.10.79 RUSTSEC-2026-0474
>=0.9.7 <0.10.79 RUSTSEC-2026-0474
Impacted packages
Timeline
Published
6 months ago
April 19, 2026 at 12:00 PM UTC
Fixed (0.10.78)
6 months ago
April 19, 2026 at 08:02 PM UTC
Last Modified
14 hours ago
November 10, 2026 at 02:00 PM UTC