Threats tagged 'rustsec-2026-0473'

A buffer overflow vulnerability exists in the Deriver::derive and PkeyCtxRef::derive functions when used with OpenSSL 1.1.x. These functions pass the caller's buffer length to EVP_PKEY_derive, which in OpenSSL 1.1.x implementations for X25519, X448, and HKDF-extract ignores the length and writes the full result, causing an overflow if the buffer is too short. This issue is fixed in version 0.10.78 by deriving into a temporary buffer when needed. OpenSSL 3.x is not affected.