Medium
CVE-2026-22795
Issue summary: An invalid or NULL pointer dereference can happen in
an application processing a malformed PKCS#12 file.…
Medium
CVE-2026-22796
Issue summary: A type confusion vulnerability exists in the signature
verification of signed PKCS#7 data where an ASN1_T…
High
CVE-2025-69419
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously
crafted PKCS#12 file with a BMPString (UTF-16…
High
CVE-2025-69420
Issue summary: A type confusion vulnerability exists in the TimeStamp Response
verification code where an ASN1_TYPE unio…
High
CVE-2025-69421
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer
dereference in the PKCS12_item_decrypt_d2i…
Medium
CVE-2025-69418
Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs who…