CVE-2026-41681

Name of the Vulnerable Software and Affected Versions rust-openssl versions 0.10.39 through 0.10.77

Description The EVP DigestFinal() function always writes EVP MD CTX size(ctx) to the out buffer. If the out buffer is smaller than that size, the MdCtxRef::digest final() function writes past its end, which typically results in stack corruption. This issue is reachable from safe Rust.

Recommendations Update to version 0.10.78.