Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: OpenSSL — openssl-library.org/news/secadv/20250930.txt Clear all filters
TI-2025-08464 CVE-2025-9232 · GHSA-76r2-c3cg-f5r9

Out-of-bounds read in HTTP client no_proxy handling

Priority LOW 31

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02214 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +3 CWE-125
TI-2025-08463 CVE-2025-9231 · GHSA-9mrx-mqmg-gwj9

Timing side-channel in SM2 algorithm on 64 bit ARM

Priority LOW 29

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0147 Published 2025-09-30 Fixed in 3.5.4, 3.4.3 +2 CWE-385
TI-2025-08462 CVE-2025-9230

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Priority MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01638 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125