A vulnerability in rust-openssl versions from 0.10.50 up to but not including 0.10.80 causes incorrect sizing of output buffers in the CipherCtxRef::cipher_update_inplace function when used with AES key-wrap-with-padding ciphers. This leads to OpenSSL writing up to 7 bytes beyond the end of the caller's buffer or Vec for non-multiple-of-8 inputs, resulting in attacker-controllable heap corruption. The issue is fixed in version 0.10.80.