CVE-2025-15467

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0 through 3.6 OpenSSL versions 3.0.19, 3.3.6, 3.4.4, 3.5.5, and 3.6.1 are not affected. OpenSSL 1.1.1 and 1.0.2 are not affected.

Description OpenSSL is vulnerable to a stack buffer overflow in the parsing of CMS AuthEnvelopedData messages with maliciously crafted AEAD parameters. An attacker can supply a crafted CMS message with an oversized Initialization Vector (IV) to trigger a stack-based out-of-bounds write before authentication or tag verification occurs. This vulnerability can lead to a denial of service (DoS) or potentially remote code execution (RCE). The FIPS modules in versions 3.6, 3.5, 3.4, 3.3, and 3.0 are not affected.

Recommendations Update OpenSSL to version 3.0.19, 3.3.6, 3.4.4, 3.5.5, or 3.6.1.