CVE-2026-42767

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description A NULL pointer dereference can occur in a CMP client application when processing a crafted CMP response. An attacker controlling a CMP server or acting as a man-in-the-middle can send a CRMF CertRepMessage containing an EncryptedValue structure where the symmAlg field includes an algorithm OID but lacks a parameters field. This leads to an application crash and a Denial of Service. This issue affects applications that process untrusted CMP/CRMF messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.