VDB
GCVE-110-MAGEIA-2026-29
GCVE-110-MAGEIA-2026-29
Advisory Published
Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467)
Heap out-of-bounds write in BIO_f_linebuffer on short writes.
(CVE-2025-68160)
Unauthenticated/unencrypted trailing bytes with low-level OCB function
calls. (CVE-2025-69418)
Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion.
(CVE-2025-69419)
Missing ASN1_TYPE validation in TS_RESP_verify_response() function.
(CVE-2025-69420)
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function.
(CVE-2025-69421)
Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795)
ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function.
(CVE-2026-22796)
Threat Intelligence
Snort Rules (1)
1061113: OpenSSL CVE-2025-15467 CMS AuthEnvelopedData oversized IV stack buffer overflow attempt
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | openssl | 0 (affected), 3.0.19-1.mga9 (unaffected) | — |
References
Browse GCVE Records
6,043 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.