GitHub Advisoryadvisory · crates.io

GHSA-pqf5-4pqq-29f5 rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

HIGH Published 2026-04-22 Modified 2026-04-27 Official page ↗
Aliases
CVE-2026-41676
Ecosystem
crates.io
Packages
openssl
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Weaknesses
CWE-131, CWE-787
Reviewed
2026-04-22

Affected packages

• crates.io openssl: >= 0.9.27, < 0.10.78 → fixed in 0.10.78

Description

`Deriver::derive` (and `PkeyCtxRef::derive`) sets `len = buf.len()` and passes it as the in/out length to `EVP_PKEY_derive`, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming `*keylen`, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL.

Related

Alias · CVE (1)

  • CVE-2026-41676 rust-openssl provides OpenSSL bindings for the Rust programming language. vulnerability

Weakness · CWE (2)

  • CWE-131 Incorrect Calculation of Buffer Size weakness
  • CWE-787 Out-of-bounds Write weakness

References