OpenSSL
OpenSSL Security Releases - January 2026
openssl-2026-01 Jan 1, 2026 Source: Vendor
OpenSSL security advisories for January 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2025-15467
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
9 lines
Showing 1–9 of 9 matching , clear filters
CVE-2025-15467
BR2026-0000-031881
OpenSSL
unclaimed
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with
maliciously crafted AEAD parameters can trigger a stack buffer overflow.
Impact summary: A stack buffer overflow may lead...
Credited as Stanislav Fort (Aisle Research)
CVE-2025-68160
BR2026-0000-032082
OpenSSL
unclaimed
Issue summary: Writing large, newline-free data into a BIO chain using the
line-buffering filter where the next BIO performs short writes can trigger
a heap-based out-of-bounds write.
Impact summa...
Credited as Petr Šimeček (Aisle Research)
CVE-2025-68160
BR2026-0000-032083
OpenSSL
unclaimed
Issue summary: Writing large, newline-free data into a BIO chain using the
line-buffering filter where the next BIO performs short writes can trigger
a heap-based out-of-bounds write.
Impact summa...
Credited as Stanislav Fort (Aisle Research)
CVE-2025-69418
BR2026-0000-032084
OpenSSL
unclaimed
Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial bl...
Credited as Stanislav Fort (Aisle Research)
CVE-2025-69419
BR2026-0000-032085
OpenSSL
unclaimed
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously
crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing
non-ASCII BMP code point can trigger a one byte ...
Credited as Stanislav Fort (Aisle Research)
CVE-2025-69420
BR2026-0000-032086
OpenSSL
unclaimed
Issue summary: A type confusion vulnerability exists in the TimeStamp Response
verification code where an ASN1_TYPE union member is accessed without first
validating the type, causing an invalid or...
Credited as Luigino Camastra (Aisle Research)
CVE-2025-69421
BR2026-0000-032087
OpenSSL
unclaimed
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer
dereference in the PKCS12_item_decrypt_d2i_ex() function.
Impact summary: A NULL pointer dereference can trigger a cra...
Credited as Luigino Camastra (Aisle Research)
CVE-2026-22795
BR2026-0000-032122
OpenSSL
unclaimed
Issue summary: An invalid or NULL pointer dereference can happen in
an application processing a malformed PKCS#12 file.
Impact summary: An application processing a malformed PKCS#12 file can be
ca...
Credited as Luigino Camastra (Aisle Research)
CVE-2026-22796
BR2026-0000-032123
OpenSSL
unclaimed
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_TYPE union member is
accessed without first validating the type, causing an in...
Credited as Luigino Camastra (Aisle Research)