'openssl dgst' one-shot codepath silently truncates inputs >16MB
Description
A vulnerability identified as CVE-2025-15469 affects the 'openssl dgst' one-shot codepath, where inputs larger than 16MB are silently truncated. This issue is present in Microsoft product version 3.0. No CVSS score or detailed impact information is provided, and no patch or remediation details are available.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-15469 describes a vulnerability in the 'openssl dgst' one-shot codepath within Microsoft product version 3.0. The vulnerability causes inputs exceeding 16MB to be silently truncated, potentially leading to incorrect digest calculations or other unintended behavior. The vulnerability is categorized under CWE-347, which relates to improper verification of cryptographic signatures. No further technical details, exploit information, or patch status are provided.
Potential Impact
The silent truncation of inputs larger than 16MB in the 'openssl dgst' one-shot codepath may result in incorrect cryptographic digest outputs. This could affect the integrity verification processes relying on this functionality. However, no confirmed exploit or active attacks are reported, and the exact impact on systems or data is not detailed.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2025-15469
- Cve Count
- 1
Threat ID: 6acc00d72cdf04f656feeb28
Added to database: 10/11/2026, 21:34:15 UTC
Last enriched: 10/11/2026, 21:56:14 UTC
Last updated: 10/11/2026, 23:28:21 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.