Threats tagged 'rustsec-2026-0475'

A buffer overflow vulnerability exists in OpenSSL's MdCtxRef::digest_final function where the output buffer length is not checked before calling EVP_DigestFinal. This causes an overrun if the output slice is shorter than the digest size, potentially corrupting the stack. The issue affects versions from 0.10.39 up to but not including 0.10.78. The vulnerability was fixed in version 0.10.78 by adding a length check that returns an error if the output slice is too short.