A significant security advisory addressing multiple vulnerabilities across several versions of its cryptographic library. The update patches ten distinct security flaws, ranging from memory corruption issues to logic errors.
The most severe among them could allow remote attackers to execute arbitrary code or trigger denial-of-service (DoS) conditions on affected systems.
The advisory highlights two primary vulnerabilities that pose significant risks to enterprise environments and software dependencies.
Critical Vulnerabilities
The most concerning flaw is CVE-2025-15467, a high-severity stack buffer overflow in the parsing of CMS AuthEnvelopedData. This vulnerability occurs when OpenSSL parses CMS structures using AEAD ciphers, such as AES-GCM.
The library fails to properly verify that the Initialization Vector (IV) length fits into the fixed-size stack buffer.
An attacker can exploit this by sending a crafted CMS message with an oversized IV. Since the overflow happens before any authentication or tag verification, no valid key material is needed to trigger the crash or potential code execution.
This affects OpenSSL versions 3.0 through 3.6.The second major issue is CVE-2025-11187, a moderate-severity vulnerability involving improper validation of PBMAC1 parameters in PKCS#12 files.
When verifying a PKCS#12 file, the library uses the PBKDF2 salt and key length parameters without validation.
If the key length exceeds 64 bytes, it overflows a fixed stack buffer. While this requires a user to process a malicious PKCS#12 file, it can lead to a crash or potential code execution.
| CVE ID | Severity | Vulnerability Type | Affected Versions |
|---|---|---|---|
| CVE-2025-15467 | High | Stack Buffer Overflow (CMS Parsing) | 3.0, 3.3, 3.4, 3.5, 3.6 |
| CVE-2025-11187 | Moderate | Improper Validation (PKCS#12 PBMAC1) | 3.4, 3.5, 3.6 |
| CVE-2025-15469 | Low | Data Truncation (openssl dgst) | 3.5, 3.6 |
| CVE-2025-66199 | Low | Excessive Memory Allocation (TLS 1.3) | 3.3, 3.4, 3.5, 3.6 |
| CVE-2025-68160 | Low | Heap Out-of-Bounds Write (BIO) | 1.0.2 – 3.6 |
Several low-severity issues were also addressed. CVE-2025-66199 describes a flaw in TLS 1.3 that allows compressed certificates to trigger excessive memory allocation (up to 22 MiB per connection), leading to resource exhaustion.
Additionally, CVE-2025-15469 affects the openssl dgst command-line tool, where using one-shot signing algorithms on files larger than 16MB results in silent truncation, leaving trailing data unauthenticated.
Users are strongly advised to upgrade their OpenSSL installations immediately. The FIPS modules are generally unaffected by most of these issues, as the vulnerable code paths (such as the CMS and PKCS#12 implementations) often lie outside the FIPS boundary, as reported by openssl-library.
Recommended Upgrades
- OpenSSL 3.6 → Upgrade to 3.6.1
- OpenSSL 3.5 → Upgrade to 3.5.5
- OpenSSL 3.4 → Upgrade to 3.4.4
- OpenSSL 3.3 → Upgrade to 3.3.6
- OpenSSL 3.0 → Upgrade to 3.0.19
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
