CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
Vulnerability summary
CVE-2025-11187 is a medium (CVSS 6.1) NULL Pointer Dereference vulnerability in openssl. EPSS estimates a 5.23% chance of exploitation in the next 30 days, higher than 92.5% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.1, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 14 · Related 11Timeline
- 27-01-2026PublishedVulnerability first disclosed.
- 20-03-2026Last modifiedVulnerability information updated.
Description
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.
CVSS metrics
7 scores · 7 sources · 1 version- OSV · AlpineEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- OSV · UbuntuEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- OSV · DebianEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- OSV · WolfiEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- OSV · ChainguardEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- NVDNIST6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
EPSS trend
Probability
5.23%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
Increase +0.09 pp
From 5.14% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundCve 2025 11187
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
Chainguard8 products
- libcrypto3-2.34< 3.6.1-r0
- openssl< 3.6.1-r0
- openssl-3.5< 3.5.5-r0
- openssl-3.5-libcrypto< 3.5.5-r0
- openssl-3.5-libssl< 3.5.5-r0
Ubuntu2 products
- nodejsAll versions (No fix recorded)
- openssl< 3.5.3-1ubuntu3 | < 3.5.5-1ubuntu1
Alpine1 product
- openssl≥ 3.4.0, < 3.5.5-r0
Debian1 product
- openssl< 3.5.4-1~deb13u2 | < 3.5.5-1
Openssl1 product
- openssl≥ 3.4.0, < 3.4.4 | ≥ 3.5.0, < 3.5.5 | ≥ 3.6.0, < 3.6.1
Wolfi1 product
- openssl< 3.6.1-r0
6 vendors · 14 products
