CVE-2026-34180
- Source
- https://cve.org/CVERecord?id=CVE-2026-34180
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-34180.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-34180
- Downstream
- Related
- Published
- 2026-06-09T16:03:17Z
- Modified
- 2026-09-09T15:45:31Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Heap Buffer Over-read in ASN.1 Content Parsing
- Details
-
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms.
Impact summary: The heap buffer over-read may crash the application (Denial of Service) or to load into the decoded ASN.1 object contents of memory beyond the end of the input buffer. More typically such ASN.1 elements would instead be truncated.
An integer truncation in OpenSSL's ASN.1 decoder causes the content length of an ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the worst case the truncated length is treated as a request to scan the binary content for a terminating zero byte, possibly causing OpenSSL to read either less than or beyond the end of the allocated buffer.
Applications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected. OpenSSL's own command-line tools are not vulnerable, as data read through the BIO layer is checked before it reaches the affected code. The issue only affects 64-bit Unix and Unix-like platforms; 32-bit platforms and 64-bit Windows are not affected.
The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
- Database specific
{ "cna_assigner": "openssl", "cwe_ids": [ "CWE-125" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34180.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34180.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-34180
- https://openssl-library.org/news/secadv/20260609.txt
- https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d
- https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83
- https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff
- https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43
- https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16
Affected packages
Git / github.com/openssl/openssl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openssl/openssl
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "1.0.2" }, { "fixed": "1.0.2zq" }, { "introduced": "1.1.1" }, { "fixed": "1.1.1zh" }, { "introduced": "3.0.0" }, { "fixed": "3.0.21" }, { "introduced": "3.4.0" }, { "fixed": "3.4.6" }, { "introduced": "3.5.0" }, { "fixed": "3.5.7" }, { "introduced": "3.6.0" }, { "fixed": "3.6.3" }, { "introduced": "4.0.0-NA" }, { "last_affected": "4.0.0-NA" } ], "source": [ "CPE_RANGE", "CPE_STRING", "REFERENCES" ] }
Affected versions
3.*
3.4-POST-CLANG-FORMAT-WEBKIT
3.4-PRE-CLANG-FORMAT-WEBKIT
4.*
4.0.0-NA
openssl-3.*
openssl-3.4.0
openssl-3.4.1
openssl-3.4.2
openssl-3.4.3
openssl-3.4.4
openssl-3.4.5
openssl-4.*
openssl-4.0.0
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-34180.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"53214108288776647741275233147654436526",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"320267436817932155653906178307380969200",
"30115894267600804239536856163586595677",
"23558578592795469757909103851850343171",
"17799849957227699774711002123141587857",
"42341873062082005998984807998045276374",
"261393998870568144932847193933630306924",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"100194122663462334847528959275194658724",
"130566677364000324829985761619485595933",
"139450354736387718719450085420863140797",
"58621743932426957895629831490869659400",
"117543249045315008245940431878629833089",
"16026874736481656198404158159631764460",
"330524745316556226745010539469934831546",
"327748363202757222487231988002875540466",
"308414666606692371225601335823336131302"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-0ae5bbd2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"227289184607936123042847166539399605026",
"301804664818318515002029985544958406393",
"281640860276829317870241943565090034590",
"42300937228587669491448957702606411256",
"327697935414145030383442306507222077314"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-0f1fc87e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/d82e959e621a3d597f1e0d50ff8c2d8b96915fd7",
"target": {
"file": "include/openssl/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "73859934412863856772425858944783637993",
"length": 3029
},
"id": "CVE-2026-34180-1692fb8c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "73859934412863856772425858944783637993",
"length": 3029
},
"id": "CVE-2026-34180-3938e24c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"19539661553841879622633679962680969091",
"133036846096550422788696208295706083216",
"2879305035241628928916436793475403947",
"58235332148236106609765445750408197531",
"276728337026316762965321377235658470601",
"243010485815873192586173884473010295078",
"175492772248432625447345810599597002812",
"150097312491038494195658212970374645525"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-425a4aad",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/7b560c174dcd569795f5be66e0c091d1be440614",
"target": {
"file": "crypto/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"53214108288776647741275233147654436526",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"320267436817932155653906178307380969200",
"30115894267600804239536856163586595677",
"23558578592795469757909103851850343171",
"17799849957227699774711002123141587857",
"42341873062082005998984807998045276374",
"261393998870568144932847193933630306924",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"100194122663462334847528959275194658724",
"130566677364000324829985761619485595933",
"90371650052899301631217696225591147992",
"246784737627998664119002956221509877842",
"315371643750711437594895449353374659288",
"286011929765548229255520019142347591441",
"123472680076330230192277232253048086730",
"13780735696208980306919453088952308039",
"25913059314610070854202480799497690613"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-5268d8ae",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"53214108288776647741275233147654436526",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"320267436817932155653906178307380969200",
"30115894267600804239536856163586595677",
"23558578592795469757909103851850343171",
"17799849957227699774711002123141587857",
"42341873062082005998984807998045276374",
"261393998870568144932847193933630306924",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"100194122663462334847528959275194658724",
"130566677364000324829985761619485595933",
"139450354736387718719450085420863140797",
"58621743932426957895629831490869659400",
"117543249045315008245940431878629833089",
"16026874736481656198404158159631764460",
"330524745316556226745010539469934831546",
"327748363202757222487231988002875540466",
"308414666606692371225601335823336131302"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-7ebd8535",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51740365743783670239691639319351368665",
"length": 2819
},
"id": "CVE-2026-34180-8b17af82",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"53214108288776647741275233147654436526",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"320267436817932155653906178307380969200",
"30115894267600804239536856163586595677",
"23558578592795469757909103851850343171",
"17799849957227699774711002123141587857",
"42341873062082005998984807998045276374",
"261393998870568144932847193933630306924",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"100194122663462334847528959275194658724",
"130566677364000324829985761619485595933",
"139450354736387718719450085420863140797",
"58621743932426957895629831490869659400",
"117543249045315008245940431878629833089",
"16026874736481656198404158159631764460",
"330524745316556226745010539469934831546",
"327748363202757222487231988002875540466",
"308414666606692371225601335823336131302"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-9aeaec3a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "73859934412863856772425858944783637993",
"length": 3029
},
"id": "CVE-2026-34180-a3d8c13c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "73859934412863856772425858944783637993",
"length": 3029
},
"id": "CVE-2026-34180-c02f3ec9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"53214108288776647741275233147654436526",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"320267436817932155653906178307380969200",
"30115894267600804239536856163586595677",
"23558578592795469757909103851850343171",
"17799849957227699774711002123141587857",
"42341873062082005998984807998045276374",
"261393998870568144932847193933630306924",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"100194122663462334847528959275194658724",
"130566677364000324829985761619485595933",
"139450354736387718719450085420863140797",
"58621743932426957895629831490869659400",
"117543249045315008245940431878629833089",
"16026874736481656198404158159631764460",
"330524745316556226745010539469934831546",
"327748363202757222487231988002875540466",
"308414666606692371225601335823336131302"
],
"threshold": 0.9
},
"id": "CVE-2026-34180-e0e0a062",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
}
]
vanir_signatures_modified
"2026-09-09T15:45:31Z"