Vulnerability Details CVE-2026-45784
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVP_aes_{128,192,256}_wrap_pad. For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This issue is fixed in version 0.10.80.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.7%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2026-45784
-
cpe:2.3:a:sfackler:openssl:0.10.50
-
cpe:2.3:a:sfackler:openssl:0.10.51
-
cpe:2.3:a:sfackler:openssl:0.10.52
-
cpe:2.3:a:sfackler:openssl:0.10.53
-
cpe:2.3:a:sfackler:openssl:0.10.54
-
cpe:2.3:a:sfackler:openssl:0.10.55
-
cpe:2.3:a:sfackler:openssl:0.10.56
-
cpe:2.3:a:sfackler:openssl:0.10.57
-
cpe:2.3:a:sfackler:openssl:0.10.58
-
cpe:2.3:a:sfackler:openssl:0.10.59
-
cpe:2.3:a:sfackler:openssl:0.10.60
-
cpe:2.3:a:sfackler:openssl:0.10.61
-
cpe:2.3:a:sfackler:openssl:0.10.62
-
cpe:2.3:a:sfackler:openssl:0.10.63
-
cpe:2.3:a:sfackler:openssl:0.10.64
-
cpe:2.3:a:sfackler:openssl:0.10.65
-
cpe:2.3:a:sfackler:openssl:0.10.66
-
cpe:2.3:a:sfackler:openssl:0.10.67
-
cpe:2.3:a:sfackler:openssl:0.10.68
-
cpe:2.3:a:sfackler:openssl:0.10.69
-
cpe:2.3:a:sfackler:openssl:0.10.70
-
cpe:2.3:a:sfackler:openssl:0.10.71
-
cpe:2.3:a:sfackler:openssl:0.10.72
-
cpe:2.3:a:sfackler:openssl:0.10.73
-
cpe:2.3:a:sfackler:openssl:0.10.74
-
cpe:2.3:a:sfackler:openssl:0.10.75
-
cpe:2.3:a:sfackler:openssl:0.10.76
-
cpe:2.3:a:sfackler:openssl:0.10.77
-
cpe:2.3:a:sfackler:openssl:0.10.78
-
cpe:2.3:a:sfackler:openssl:0.10.79