Skip to main content

Opencryptoki CVE-2026-22791

MEDIUM
Incorrect Calculation of Buffer Size (CWE-131)
2026-01-13 security-advisories@github.com
Buffer Overflow Linux Red Hat Opencryptoki Suse Opencryptoki Project
6.6
CVSS 3.1 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
SUSE
MEDIUM
qualitative
Red Hat
6.6 MEDIUM
qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
PoC Detected
Feb 03, 2026 - 18:47 vuln.today
Public exploit code
Patch released
Feb 03, 2026 - 18:47 nvd
Patch available
CVE Published
Jan 13, 2026 - 19:16 nvd
MEDIUM 6.6

DescriptionGitHub Advisory

openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.

AnalysisAI

openCryptoki is a PKCS#11 library and tools for Linux and AIX. [CVSS 6.6 MEDIUM]

Technical ContextAI

Classified as CWE-131 (Incorrect Calculation of Buffer Size). Affects Opencryptoki. openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.

RemediationAI

A vendor patch is available — apply it immediately. Enable ASLR, DEP/NX, and stack canaries where possible.

More in Opencryptoki

View all
CVE-2026-23893 MEDIUM
6.8 Jan 22

Privilege escalation in openCryptoki 2.3.2+ allows token-group members to exploit insecure symlink handling in group-wri
CVE-2026-40253 MEDIUM
6.8 Apr 16

Out-of-bounds reads in openCryptoki's BER/DER decoding layer expose Linux and AIX systems to cryptographic service disru
CVE-2012-4455 MEDIUM
6.2 Oct 10

openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attac
CVE-2024-0914 MEDIUM
5.9 Jan 31

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 pad
CVE-2012-4454 LOW
2.9 Oct 10

openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbit

Same weakness CWE-131 – Incorrect Calculation of Buffer Size

View all
CVE-2024-23606 CRITICAL POC
9.8
CVE-2021-21824 CRITICAL POC
9.8
CVE-2025-66216 CRITICAL POC
9.3
CVE-2021-21793 HIGH POC
8.8
CVE-2021-21782 HIGH POC
8.8
CVE-2021-21776 HIGH POC
8.8
CVE-2023-0568 HIGH POC
8.1
CVE-2021-29608 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.12 Container suse/sl-micro/6.0/base-os-container:2.1.3-6.9 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.9 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.12 Image SL-Micro Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 Fixed
SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP applications 16.0 Fixed
SUSE Linux Micro 6.2 Fixed
openSUSE Leap 16.0 Fixed

Share

CVE-2026-22791 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy