The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service.
When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing.
Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Apr 10, 2026 | Apr 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade edk2-tools-docUpgrade openssl11Upgrade edk2-ovmfUpgrade openssl-snapsafeUpgrade openssl-libsUpgrade openssl11-debuginfoUpgrade edk2-aarch64Upgrade openssl11-libsUpgrade openssl-snapsafe-develUpgrade openssl11-develUpgrade openssl-perlUpgrade openssl-snapsafe-staticUpgrade opensslUpgrade openssl-snapsafe-debuginfoUpgrade openssl-snapsafe-libsUpgrade openssl-staticUpgrade openssl-debuginfoUpgrade edk2-debuginfoUpgrade edk2-toolsUpgrade openssl-snapsafe-perlUpgrade openssl-develUpgrade openssl11-static | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade openssl-fips-provider-latest-debuginfoUpgrade openssl-perlUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-snapsafe-libs-debuginfoUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-snapsafe-libsUpgrade openssl-fips-provider-latest | Apr 14, 2026 | Apr 7, 2026 |
| Debian | — | Upgrade openssl | Apr 9, 2026 | Apr 9, 2026 |
| Freebsd | — | Upgrade openssl35Upgrade opensslUpgrade openssl111Upgrade openssl34Upgrade openssl36 | Apr 8, 2026 | Apr 7, 2026 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 9, 2026 | Apr 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory47 | May 6, 2026 | May 4, 2026 |
| Oracle Missing Cpu Jul 2026 | — | Apply the July 2026 Critical Patch Update (CPU) for Oracle Database | Jul 22, 2026 | Apr 7, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 7, 2026 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 9.4.14Upgrade Splunk Universal Forwarder to version 10.4.1Upgrade Splunk Universal Forwarder to version 10.4.2Upgrade Splunk Universal Forwarder to version 10.0.8Upgrade Splunk Universal Forwarder to version 10.0.9Upgrade Splunk Universal Forwarder to version 9.4.13Upgrade Splunk Universal Forwarder to version 10.2.5Upgrade Splunk Universal Forwarder to version 10.2.6 | Jul 30, 2026 | Apr 7, 2026 |
| Ubuntu | — | Upgrade libssl3Upgrade libssl1.1 (Ubuntu Pro)Upgrade openssl (Ubuntu Pro)Upgrade libssl1.0.0 (Ubuntu Pro)Upgrade libssl3t64Upgrade openssl1.0 (Ubuntu Pro)Upgrade openssl | Apr 9, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub