Is there a patch available for CVE-2026-45784?

Yes, a patch is available for CVE-2026-45784. Update the affected software to the latest version immediately.

rust-openssl CVE-2026-45784

Q: What is the CVSS score of CVE-2026-45784?

CVE-2026-45784 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-45322 MEDIUM

Incorrect Calculation of Buffer Size (CWE-131)

2026-05-19 https://github.com/rust-openssl/rust-openssl

GHSA-phqj-4mhp-q6mq

Information Disclosure OpenSSL Red Hat

5.1

CVSS 4.0 · Vendor: https://github.com/rust-openssl/rust-openssl

Severity by source

Vendor (https://github.com/rust-openssl/rust-openssl) PRIMARY

5.1 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

SUSE

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Red Hat

5.1 MEDIUM

qualitative

Primary rating from Vendor (https://github.com/rust-openssl/rust-openssl).

CVSS VectorVendor: https://github.com/rust-openssl/rust-openssl

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Jul 17, 2026 - 21:22 NVD

5.1 (MEDIUM)

Source Code Evidence Fetched

May 19, 2026 - 20:18 vuln.today

Analysis Generated

May 19, 2026 - 20:18 vuln.today

DescriptionCVE.org

CipherCtxRef::cipher_update_inplace incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad). For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced.

This only impacts users using AES key-wrap-with-padding ciphers.

This method was missed in the fix for GHSA-xv59-967r-8726

AnalysisAI

Heap corruption in rust-openssl versions 0.10.50 through 0.10.79 allows attacker-controllable out-of-bounds writes of up to 7 bytes via the CipherCtxRef::cipher_update_inplace method when used with AES key-wrap-with-padding ciphers (EVP_aes_128_wrap_pad, EVP_aes_192_wrap_pad, EVP_aes_256_wrap_pad). The buffer sizing logic fails to account for AES-KWP's padding expansion when input length is not a multiple of 8, and because this occurs through FFI into native OpenSSL, Rust's memory safety guarantees do not prevent the corruption. This is a missed case from a prior fix for GHSA-xv59-967r-8726 in the same method; no public exploit has been identified at time of analysis.

Technical ContextAI

The rust-openssl crate (pkg:rust/openssl) provides Rust FFI bindings to the native OpenSSL C library. The vulnerable method CipherCtxRef::cipher_update_inplace performs symmetric cipher operations by allocating and reusing a single output buffer. AES key-wrap-with-padding (AES-KWP, RFC 5649) is an asymmetric-expansion cipher: when wrapping, it appends an 8-byte integrity check value (ICV) and pads the plaintext to the next multiple of 8 bytes, meaning output is always larger than input. For a non-multiple-of-8 input, the required output can be up to 7 bytes larger than the allocated buffer. The buffer sizing logic did not correctly account for this expansion, producing a buffer that is undersized by up to 7 bytes. CWE-131 (Incorrect Calculation of Buffer Size) is the precise root cause class: the formula used to compute the required output length was arithmetically incorrect for this cipher mode's expansion semantics. Because the write path goes through unsafe FFI into OpenSSL's C layer, Rust's ownership and bounds-checking guarantees cannot prevent the overwrite.

RemediationAI

Upgrade the rust-openssl crate to version 0.10.80 or later, which contains the corrected buffer sizing logic per the advisory at https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-phqj-4mhp-q6mq. Update Cargo.toml to specify openssl = "0.10.80" or a compatible semver constraint such as ">=0.10.80", then run cargo update to resolve the patched version. The vendor-released patch is version 0.10.80, independently confirmed by GHSA advisory data. If an immediate upgrade is not possible, the primary compensating control is to replace calls to cipher_update_inplace with cipher_update (the non-in-place variant), which is not affected by this bug; note that this trades the performance benefit of in-place operation for additional memory allocation. Alternatively, ensure that all inputs passed to cipher_update_inplace with AES-KWP ciphers are padded to a multiple of 8 bytes before invocation, which prevents the undersized buffer condition, though this requires application-level padding logic and careful validation.

More in OpenSSL

View all

CVE-2014-0160 HIGH Act Now POC

7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

CVE-2014-0195 MEDIUM This Month POC

6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0

CVE-2014-0224 HIGH Act Now POC

7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph

CVE-2016-0800 MEDIUM This Month POC

5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se

CVE-2015-0204 MEDIUM This Month POC

4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2015-4000 LOW Monitor POC

3.7 May 21

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pro

CVE-2014-3566 LOW Monitor POC

3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

CVE-2016-2107 MEDIUM This Month POC

5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM This Month POC

6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH Act Now

7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig

CVE-2014-3470 MEDIUM This Month

4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

CVE-2017-3730 HIGH Act Now POC

7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

Same weakness CWE-131 – Incorrect Calculation of Buffer Size

View all

CVE-2024-23606 CRITICAL POC

9.8

CVE-2021-21824 CRITICAL POC

9.8

CVE-2025-66216 CRITICAL POC

9.3

CVE-2021-21793 HIGH POC

8.8

CVE-2021-21782 HIGH POC

8.8

CVE-2021-21776 HIGH POC

8.8

CVE-2023-0568 HIGH POC

8.1

CVE-2021-29608 HIGH POC

7.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
Container suse/sl-micro/6.0/baremetal-os-container:latest	Affected
Container suse/sl-micro/6.0/toolbox:latest	Affected
Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-GCE Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-BYOS-Azure Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Hardened-GCE Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE	Affected
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed

CVE-2026-45784 vulnerability details – vuln.today

Back

rust-openssl CVE-2026-45784

Severity by source

CVSS VectorVendor: https://github.com/rust-openssl/rust-openssl

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in OpenSSL

Same weakness CWE-131 – Incorrect Calculation of Buffer Size

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code