CVE-2026-45784: rust-openssl Incorrect Calculation of Buffer Size

Vulnerability summary

CVE-2026-45784 is a high (CVSS 7.1) Incorrect Calculation of Buffer Size vulnerability in rust-openssl. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.5% of scored vulnerabilities.

Timeline

1. 17-07-2026
   PublishedVulnerability first disclosed.
2. 20-07-2026
   Last modifiedVulnerability information updated.

Description

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVP_aes_{128,192,256}_wrap_pad. For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This issue is fixed in version 0.10.80.

• CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.