A buffer overflow vulnerability exists in OpenSSL's AES key-wrap-with-padding cipher implementation within the `cipher_update_inplace` method. This method incorrectly calculates buffer size, allowing writes up to 7 bytes beyond the allocated buffer when input length is not a multiple of 8. The flaw affects OpenSSL versions from 0.10.50 up to but not including 0.10.80. The issue was fixed in version 0.10.80 by correcting the size check.