OpenSSL
OpenSSL Security Releases - September 2025
openssl-2025-09 Sep 1, 2025 Source: Vendor
OpenSSL security advisories for September 2025, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2025-9230
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2025-9230
BR2025-0000-032093
OpenSSL
unclaimed
Issue summary: An application trying to decrypt CMS messages encrypted using
password based encryption can trigger an out-of-bounds read and write.
Impact summary: This out-of-bounds read may trig...
Credited as Stanislav Fort (Aisle Research)
CVE-2025-9232
BR2025-0000-032094
OpenSSL
unclaimed
Issue summary: An application using the OpenSSL HTTP client API functions may
trigger an out-of-bounds read if the 'no_proxy' environment variable is set and
the host portion of the authority compo...
Credited as Stanislav Fort (Aisle Research)