CVE-2026-28389
Description
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
How to fix
- openssl openssl1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 or later
- github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686
- github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5
- github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616
- github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a
- github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openssl openssl | 1.0.2 ≤ v < 1.0.2zp, 1.1.1 ≤ v < 1.1.1zg, 3.0.0 ≤ v < 3.0.20, 3.3.0 ≤ v < 3.3.7, 3.4.0 ≤ v < 3.4.5, 3.5.0 ≤ v < 3.5.6, 3.6.0 ≤ v < 3.6.2 | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.