Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rust-openssl/rust-openssl
master @ 5c7cc1a
26
Fixes
7
CVEs
CRITICAL
Peak severity
48.0%
Coverage
Highlights
Memory Safety: 8 prior fixes. Scrutinize any change in this area.
openssl/src/ossl_param.rs: most-fixed (5 issues). Treat as high-risk during review.
22 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Inadequate size validation during key derivation under OpenSSL 1.1.x/LibreSSL permits out-of-bounds writes if the parsed required size unexpectedly exceeds the allocated target slice size. This is tracked under CVE-2026-41676.
Memory Corruption: EVP_DigestFinal can write beyond the allocated bounds of the output buffer if the destination slice's length is not explicitly verified beforehand, leading to stack corruption as tracked under CVE-2026-41681.
Use After Free: OsslParamBuilder and OsslParam structures historically suffered from missing or incorrect lifetime associations, allowing raw references to inner cryptographic parameter arrays to be retained after the builder is dropped or mutated.