CVE-2026-41681
Public on 2026-04-24
Modified on 2026-04-28
Description
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | aws-nitro-enclaves-cli | Pending Fix | ||
| Amazon Linux 2023 | aws-nitro-enclaves-cli | Pending Fix | ||
| Amazon Linux 2023 | aws-nitro-tpm-tools | Pending Fix | ||
| Amazon Linux 2 - Core | clamav1.4 | Pending Fix | ||
| Amazon Linux 2023 | clamav1.5 | Pending Fix | ||
| Amazon Linux 2 - Firefox Extra | firefox | Pending Fix | ||
| Amazon Linux 2023 | firefox | Pending Fix | ||
| Amazon Linux 2023 | gjs | Pending Fix | ||
| Amazon Linux 2023 | mount-s3 | Pending Fix | ||
| Amazon Linux 2023 | papers | Pending Fix | ||
| Amazon Linux 2 - Core | rust | Pending Fix | ||
| Amazon Linux 2023 | rust | Pending Fix | ||
| Amazon Linux 2 - Core | thunderbird | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |