CVE-2026-81720

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9

Description An issue exists where the software fails to validate the memory cost parameter within identity file protection blocks. This allows an attacker with write access to local identity stores to create malicious identity files with excessive memory cost values. When the system attempts to unlock identities before authentication, it can trigger out-of-memory conditions during key derivation, leading to a host crash.

Recommendations Update to version 1.4.9 or later.