Reported

April 19, 2026

Issued

November 9, 2026

Package

openssl (crates.io)

Type

Vulnerability

Categories

• memory-corruption

Keywords

#aes #key-wrap #out-of-bounds-write

Aliases

• CVE-2026-41678
• GHSA-8c75-8mhr-p7r9

References

• https://github.com/rust-openssl/rust-openssl/pull/2604

Patched

• >=0.10.78

Unaffected

• <0.10.24

Affected Functions

Version

openssl::aes::unwrap_key

• >=0.10.24, <0.10.78

Description

openssl::aes::unwrap_key guarded the size of its output buffer with an inverted assertion, out.len() + 8 <= in_.len(). Instead of rejecting an out buffer too small for the unwrapped key, it rejected buffers larger than needed and accepted buffers that were too small.

When out is shorter than in_.len() - 8 bytes, the underlying AES_unwrap_key call writes past the end of out. This out-of-bounds write is reachable from a safe function; applications that let untrusted input influence the input or output buffer sizes are exposed.

The function was added in 0.10.24. 0.10.78 corrects the assertion, so an output buffer that is too small now causes a panic before anything is written.

Advisory available under CC0-1.0 license.