Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function.
Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files.
The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure.
Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.
OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-develUpgrade openssl-libsUpgrade opensslUpgrade openssl-perl | Feb 3, 2026 | Jan 28, 2026 |
| Alpine Linux | — | Upgrade openssl | Jan 28, 2026 | Jan 27, 2026 |
| Amazon Linux Ami 2 | — | Upgrade openssl11Upgrade openssl-snapsafe-develUpgrade edk2-tools-docUpgrade edk2-debuginfoUpgrade opensslUpgrade openssl-staticUpgrade openssl-snapsafe-debuginfoUpgrade openssl-snapsafe-perlUpgrade openssl11-libsUpgrade openssl11-develUpgrade openssl-snapsafe-staticUpgrade edk2-toolsUpgrade openssl11-debuginfoUpgrade openssl-develUpgrade openssl-snapsafeUpgrade openssl-perlUpgrade edk2-aarch64Upgrade edk2-ovmfUpgrade openssl11-staticUpgrade openssl-libsUpgrade openssl-snapsafe-libsUpgrade openssl-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade openssl-snapsafe-libs-debuginfoUpgrade openssl-libsUpgrade openssl-snapsafe-libsUpgrade openssl-fips-provider-latest-debuginfoUpgrade opensslUpgrade openssl-perlUpgrade openssl-libs-debuginfoUpgrade openssl-debuginfoUpgrade openssl-fips-provider-latestUpgrade openssl-debugsourceUpgrade aws-cfn-bootstrapUpgrade openssl-devel | Feb 20, 2026 | Jan 27, 2026 |
| Debian | — | Upgrade openssl | Jan 29, 2026 | Jan 29, 2026 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Apr 29, 2026 | Apr 28, 2026 |
| Freebsd | — | Upgrade opensslUpgrade openssl33Upgrade openssl34Upgrade FreeBSDUpgrade openssl36Upgrade openssl35 | Jan 28, 2026 | Jan 27, 2026 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Jan 27, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory46 | Mar 10, 2026 | Mar 9, 2026 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade opensslUpgrade openssl-perl | Jan 30, 2026 | Jan 27, 2026 |
| Redhat_linux | — | Upgrade openssl-perlUpgrade openssl-libsNo solution existsUpgrade openssl-develUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-libs-debuginfo | Jan 29, 2026 | Jan 27, 2026 |
| Rocky_linux | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-perl | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libssl3t64Upgrade libssl3Upgrade opensslUpgrade libssl1.0.0 (Ubuntu Pro)Upgrade openssl1.0 (Ubuntu Pro)Upgrade libssl1.1 (Ubuntu Pro)Upgrade openssl (Ubuntu Pro) | Jan 28, 2026 | Jan 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub