rust-openssl project records
7 published records for vendor rust-openssl project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-121 Stack-based Buffer Overflow1
- CWE-125 Out-of-bounds Read1
- CWE-126 Buffer Over-read1
- CWE-131 Incorrect Calculation of Buffer Size1
- CWE-295 Improper Certificate Validation1
- CWE-416 Use After Free1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2018-20997No exploit | An issue was discovered in the openssl crate before 0.10.9 for Rust.rust-openssl project · rust-openssl · CWE-416 | Critical9.8 | — | 1.7% | Aug 26, 2019 |
33Monitor | CVE-2026-41898No exploit | rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerrust-openssl project · rust-openssl · CWE-126 | High8.3 | — | 0.2% | Apr 24, 2026 |
32Monitor | CVE-2016-10931No exploit | An issue was discovered in the openssl crate before 0.9.0 for Rust.rust-openssl project · rust-openssl · CWE-295 | High8.1 | — | 0.7% | Aug 26, 2019 |
32Monitor | CVE-2026-41681No exploit | rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length checkrust-openssl project · rust-openssl · CWE-121 | High8.1 | — | 0.3% | Apr 24, 2026 |
28Monitor | CVE-2026-41676No exploit | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1rust-openssl project · rust-openssl · CWE-131 | High7.2 | — | 0.2% | Apr 24, 2026 |
28Monitor | CVE-2026-41678No exploit | rust-openssl: Incorrect bounds assertion in aes key wraprust-openssl project · rust-openssl · CWE-787 | High7.2 | — | 0.2% | Apr 24, 2026 |
6Monitor | CVE-2026-41677No exploit | rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized lengthrust-openssl project · rust-openssl · CWE-125 | Low1.7 | — | 0.2% | Apr 24, 2026 |
- CVE-2018-2099740Plan
An issue was discovered in the openssl crate before 0.10.9 for Rust.
CriticalCVSS 9.8No exploitEPSS 1%rust-openssl project · rust-opensslAug 26, 2019
- CVE-2026-4189833Monitor
rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer
HighCVSS 8.3No exploitEPSS 0%rust-openssl project · rust-opensslApr 24, 2026
- CVE-2016-1093132Monitor
An issue was discovered in the openssl crate before 0.9.0 for Rust.
HighCVSS 8.1No exploitEPSS 0%rust-openssl project · rust-opensslAug 26, 2019
- CVE-2026-4168132Monitor
rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check
HighCVSS 8.1No exploitEPSS 0%rust-openssl project · rust-opensslApr 24, 2026
- CVE-2026-4167628Monitor
rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1
HighCVSS 7.2No exploitEPSS 0%rust-openssl project · rust-opensslApr 24, 2026
- CVE-2026-4167828Monitor
rust-openssl: Incorrect bounds assertion in aes key wrap
HighCVSS 7.2No exploitEPSS 0%rust-openssl project · rust-opensslApr 24, 2026
- CVE-2026-416776Monitor
rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length
LowCVSS 1.7No exploitEPSS 0%rust-openssl project · rust-opensslApr 24, 2026