PT-2026-31040 · Openssl+3 · Openssl+3
Igor Ustinov
+1
·
Published
2026-04-07
·
Updated
2026-05-10
·
CVE-2026-31789
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSSL (affected versions not specified)
Description
Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32-bit platforms. This occurs when a crafted X.509 certificate contains an excessively large OCTET STRING value in extensions such as the Subject Key Identifier (SKID) or Authority Key Identifier (AKID). The system calculates the required buffer size by multiplying the input length by 3, which can overflow on 32-bit platforms, resulting in the allocation of an undersized buffer. This may lead to a crash, attacker-controlled code execution, or other undefined behavior. Applications and services that print or log contents of untrusted X.509 certificates are susceptible, although the certificates would need to exceed 1 Gigabyte in size.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Aix
Linuxmint
Openssl
Ubuntu