rust-openssl provides OpenSSL bindings for the Rust programming language. (CVE-2026-44662)

The rust-openssl library, which provides OpenSSL bindings for Rust, contains a vulnerability in versions 0.10.0 through before 0.10.79. The functions CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update incorrectly size output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad). For inputs whose length is not a multiple of 8, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, causing heap corruption. This corruption is attacker-controllable if the plaintext length is influenced by an attacker. The vulnerability only affects users employing AES key-wrap-with-padding ciphers and is resolved in rust-openssl version 0.10.79.

Heap corruption occurs due to buffer overflow of up to 7 bytes past the allocated buffer when using AES key-wrap-with-padding ciphers with non-multiple-of-8 input lengths. This corruption is attacker-controllable if the attacker can influence the plaintext length, potentially leading to memory corruption issues. The vulnerability is limited to users of the affected cryptographic functions and cipher modes.

Upgrade rust-openssl to version 0.10.79 or later, where this vulnerability is fixed. Users not employing AES key-wrap-with-padding ciphers are not impacted. No other mitigation is indicated by the vendor advisory.