Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function.
Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and expecting the call to check the AEAD tag may accept forged messages.
CWE: CWE-354 (Improper Validation of Integrity Check Value)
Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one shot encryption and decryption call. It also verifies the AEAD tag after the decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers it skipped the AEAD tag verification when an empty ciphertext was passed to the function. The callers of this function might believe that a successful return indicates a valid AEAD tag for these ciphers, even when that has not truly been validated in this case.
FIPS impact: no The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as the affected algorithms are not FIPS approved and thus not implemented in the FIPS module.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Aug 26, 2026 | Aug 25, 2026 |
| Amazon_linux_2023 | — | Upgrade openssl-debugsourceUpgrade openssl-perlUpgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-snapsafe-libsUpgrade openssl-snapsafe-libs-debuginfoUpgrade openssl-fips-provider-latest-debuginfoUpgrade openssl-fips-provider-latestUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-devel | Sep 30, 2026 | Aug 25, 2026 |
| Debian | — | Upgrade openssl | Aug 26, 2026 | Aug 25, 2026 |
| Freebsd | — | Upgrade openssl35Upgrade FreeBSDUpgrade openssl40Upgrade openssl36Upgrade opensslUpgrade openssl34 | Aug 26, 2026 | Aug 25, 2026 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Aug 27, 2026 | Aug 25, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory49 | Oct 15, 2026 | Sep 30, 2026 |
| Redhat_linux | — | No solution exists | Sep 21, 2026 | Aug 25, 2026 |
| Ubuntu | — | Upgrade libssl3Upgrade ovmfUpgrade opensslUpgrade libssl3t64Upgrade qemu-efi-aarch64 | Aug 26, 2026 | Aug 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 16, 2026 | Aug 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub