CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41677

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.4%

CVSS Severity

CVSS v3 Score 9.1

References

https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-xmgf-hq76-4vx2

Products affected by CVE-2026-41677

Rust-Openssl Project » Rust-Openssl » Version: 0.10.0

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.0
Rust-Openssl Project » Rust-Openssl » Version: 0.10.1

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.1
Rust-Openssl Project » Rust-Openssl » Version: 0.10.10

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.10
Rust-Openssl Project » Rust-Openssl » Version: 0.10.11

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.11
Rust-Openssl Project » Rust-Openssl » Version: 0.10.12

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.12
Rust-Openssl Project » Rust-Openssl » Version: 0.10.13

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.13
Rust-Openssl Project » Rust-Openssl » Version: 0.10.14

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.14
Rust-Openssl Project » Rust-Openssl » Version: 0.10.15

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.15
Rust-Openssl Project » Rust-Openssl » Version: 0.10.16

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.16
Rust-Openssl Project » Rust-Openssl » Version: 0.10.17

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.17
Rust-Openssl Project » Rust-Openssl » Version: 0.10.18

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.18
Rust-Openssl Project » Rust-Openssl » Version: 0.10.19

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.19
Rust-Openssl Project » Rust-Openssl » Version: 0.10.2

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.2
Rust-Openssl Project » Rust-Openssl » Version: 0.10.20

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.20
Rust-Openssl Project » Rust-Openssl » Version: 0.10.21

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.21
Rust-Openssl Project » Rust-Openssl » Version: 0.10.22

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.22
Rust-Openssl Project » Rust-Openssl » Version: 0.10.23

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.23
Rust-Openssl Project » Rust-Openssl » Version: 0.10.24

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.24
Rust-Openssl Project » Rust-Openssl » Version: 0.10.3

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.3
Rust-Openssl Project » Rust-Openssl » Version: 0.10.4

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.4
Rust-Openssl Project » Rust-Openssl » Version: 0.10.5

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.5
Rust-Openssl Project » Rust-Openssl » Version: 0.10.6

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.6
Rust-Openssl Project » Rust-Openssl » Version: 0.10.7

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.7
Rust-Openssl Project » Rust-Openssl » Version: 0.10.8

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.8
Rust-Openssl Project » Rust-Openssl » Version: 0.10.9

cpe:2.3:a:rust-openssl_project:rust-openssl:0.10.9
Rust-Openssl Project » Rust-Openssl » Version: 0.9.0

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.0
Rust-Openssl Project » Rust-Openssl » Version: 0.9.1

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.1
Rust-Openssl Project » Rust-Openssl » Version: 0.9.10

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.10
Rust-Openssl Project » Rust-Openssl » Version: 0.9.11

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.11
Rust-Openssl Project » Rust-Openssl » Version: 0.9.12

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.12
Rust-Openssl Project » Rust-Openssl » Version: 0.9.13

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.13
Rust-Openssl Project » Rust-Openssl » Version: 0.9.14

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.14
Rust-Openssl Project » Rust-Openssl » Version: 0.9.15

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.15
Rust-Openssl Project » Rust-Openssl » Version: 0.9.16

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.16
Rust-Openssl Project » Rust-Openssl » Version: 0.9.17

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.17
Rust-Openssl Project » Rust-Openssl » Version: 0.9.18

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.18
Rust-Openssl Project » Rust-Openssl » Version: 0.9.19

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.19
Rust-Openssl Project » Rust-Openssl » Version: 0.9.2

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.2
Rust-Openssl Project » Rust-Openssl » Version: 0.9.20

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.20
Rust-Openssl Project » Rust-Openssl » Version: 0.9.21

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.21
Rust-Openssl Project » Rust-Openssl » Version: 0.9.22

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.22
Rust-Openssl Project » Rust-Openssl » Version: 0.9.23

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.23
Rust-Openssl Project » Rust-Openssl » Version: 0.9.24

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.24
Rust-Openssl Project » Rust-Openssl » Version: 0.9.25

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.25
Rust-Openssl Project » Rust-Openssl » Version: 0.9.26

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.26
Rust-Openssl Project » Rust-Openssl » Version: 0.9.27

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.27
Rust-Openssl Project » Rust-Openssl » Version: 0.9.28

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.28
Rust-Openssl Project » Rust-Openssl » Version: 0.9.30

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.30
Rust-Openssl Project » Rust-Openssl » Version: 0.9.31

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.31
Rust-Openssl Project » Rust-Openssl » Version: 0.9.32

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.32
Rust-Openssl Project » Rust-Openssl » Version: 0.9.33

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.33
Rust-Openssl Project » Rust-Openssl » Version: 0.9.35

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.35
Rust-Openssl Project » Rust-Openssl » Version: 0.9.36

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.36
Rust-Openssl Project » Rust-Openssl » Version: 0.9.37

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.37
Rust-Openssl Project » Rust-Openssl » Version: 0.9.38

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.38
Rust-Openssl Project » Rust-Openssl » Version: 0.9.39

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.39
Rust-Openssl Project » Rust-Openssl » Version: 0.9.40

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.40
Rust-Openssl Project » Rust-Openssl » Version: 0.9.41

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.41
Rust-Openssl Project » Rust-Openssl » Version: 0.9.42

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.42
Rust-Openssl Project » Rust-Openssl » Version: 0.9.43

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.43
Rust-Openssl Project » Rust-Openssl » Version: 0.9.44

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.44
Rust-Openssl Project » Rust-Openssl » Version: 0.9.45

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.45
Rust-Openssl Project » Rust-Openssl » Version: 0.9.46

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.46
Rust-Openssl Project » Rust-Openssl » Version: 0.9.47

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.47
Rust-Openssl Project » Rust-Openssl » Version: 0.9.48

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.48
Rust-Openssl Project » Rust-Openssl » Version: 0.9.49

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.49
Rust-Openssl Project » Rust-Openssl » Version: 0.9.9

cpe:2.3:a:rust-openssl_project:rust-openssl:0.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41677

Products

Pricing

Contact Us