Threats tagged 'rustsec-2026-0463'

A vulnerability in OpenSSL's Rust binding function `openssl::aes::unwrap_key` allows an out-of-bounds write due to incorrect buffer size validation. The function incorrectly accepts output buffers that are too small, leading to memory corruption. This flaw was introduced in version 0.10.24 and fixed in 0.10.78 by correcting the assertion to panic when the output buffer is too small.