Vulnerability Details CVE-2026-81693
openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 27.1%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2026-81693
-
cpe:2.3:a:jahlives:openssl_encrypt:0.2.2
-
cpe:2.3:a:jahlives:openssl_encrypt:0.2.3
-
cpe:2.3:a:jahlives:openssl_encrypt:0.2.4
-
cpe:2.3:a:jahlives:openssl_encrypt:0.2.5
-
cpe:2.3:a:jahlives:openssl_encrypt:0.2.6
-
cpe:2.3:a:jahlives:openssl_encrypt:0.3.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.3.1
-
cpe:2.3:a:jahlives:openssl_encrypt:0.3.2
-
cpe:2.3:a:jahlives:openssl_encrypt:0.3.3
-
cpe:2.3:a:jahlives:openssl_encrypt:0.4.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.4.1
-
cpe:2.3:a:jahlives:openssl_encrypt:0.4.2
-
cpe:2.3:a:jahlives:openssl_encrypt:0.4.3
-
cpe:2.3:a:jahlives:openssl_encrypt:0.4.4
-
cpe:2.3:a:jahlives:openssl_encrypt:0.5.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.5.1
-
cpe:2.3:a:jahlives:openssl_encrypt:0.5.3
-
cpe:2.3:a:jahlives:openssl_encrypt:0.6.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.7.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.7.1
-
cpe:2.3:a:jahlives:openssl_encrypt:0.7.2
-
cpe:2.3:a:jahlives:openssl_encrypt:0.8.0
-
cpe:2.3:a:jahlives:openssl_encrypt:0.8.1
-
cpe:2.3:a:jahlives:openssl_encrypt:0.8.2
-
cpe:2.3:a:jahlives:openssl_encrypt:0.9.2
-
cpe:2.3:a:jahlives:openssl_encrypt:1.0.0
-
cpe:2.3:a:jahlives:openssl_encrypt:1.0.1
-
cpe:2.3:a:jahlives:openssl_encrypt:1.0.2
-
cpe:2.3:a:jahlives:openssl_encrypt:1.0.3
-
cpe:2.3:a:jahlives:openssl_encrypt:1.1.0
-
cpe:2.3:a:jahlives:openssl_encrypt:1.2.0
-
cpe:2.3:a:jahlives:openssl_encrypt:1.2.1
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.0
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.1
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.2
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.3
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.4
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.5
-
cpe:2.3:a:jahlives:openssl_encrypt:1.3.6
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.0
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.1
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.2
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.3
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.4
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.5
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.6
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.7
-
cpe:2.3:a:jahlives:openssl_encrypt:1.4.8