CVE-2026-41676: `Deriver::derive` · Buffer Overflow
Affects opensslSource GCVE Database
Not known to be exploited : upgrade to 0.10.78 soon.
Data as of 10 Nov 2026, 14:22 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 0.10.78
Exploitation evidence
Disclosed: evidence found.
CVE published 19 Apr 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
Upgrade openssl to 0.10.78.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
crates.ioopensslpkg:cargo/opensslOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to version 0.10.78 or later, which includes a fix that derives into a temporary buffer when the caller's buffer is too short, preventing overflow. OpenSSL 3.x users are not affected. No other mitigation is indicated or required.
Description
A buffer overflow vulnerability exists in the Deriver::derive and PkeyCtxRef::derive functions when used with OpenSSL 1.1.x. These functions pass the caller's buffer length to EVP_PKEY_derive, which in OpenSSL 1.1.x implementations for X25519, X448, and HKDF-extract ignores the length and writes the full result, causing an overflow if the buffer is too short. This issue is fixed in version 0.10.78 by deriving into a temporary buffer when needed. OpenSSL 3.x is not affected.