TI-2025-42862 CVE-2025-69419 · GHSA-x77r-97gw-wh89
Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
Priority LOW 35
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the alloca…