A buffer overflow vulnerability exists in OpenSSL's AES key-wrap-with-padding cipher implementations prior to version 0.10.79. The issue occurs because the output buffer allocation does not account correctly for padding, causing writes up to 7 bytes beyond the buffer when input lengths are not multiples of 8. This leads to heap corruption that an attacker can partially control if they influence the plaintext length.