Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data.
Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth.
CWE: CWE-407: Inefficient Algorithmic Complexity
Description: OpenSSL manages received QUIC stream fragments using a
doubly-linked list. While it optimizes for append operations (at the end of
the list), it falls back to a head-to-tail linear search for any fragment
that does not immediately follow the current tail.
By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process.
FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.
{
"cna_assigner": "openssl",
"cwe_ids": [
"CWE-407"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42772.json"
}{
"extracted_events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.0.3"
},
{
"introduced": "3.6.0"
},
{
"fixed": "3.6.5"
},
{
"introduced": "3.5.0"
},
{
"fixed": "3.5.9"
},
{
"introduced": "3.4.0"
},
{
"fixed": "3.4.8"
}
],
"source": [
"AFFECTED_FIELD",
"REFERENCES"
]
}
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-42772.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "127390003479003223148055588688926617348",
"length": 347
},
"id": "CVE-2026-42772-00e2ecb8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_new"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"239821403704583413895967871362120457115",
"76676457631854887029342579666520126630",
"93515251276268132178928519554380228263",
"261093784909579122015396294332318071453",
"246982484821275462943405971826656360954",
"282192551015191873976908178946251796747",
"207280947455162943464184680813117087757",
"211791582211965340534548828595483541223",
"223681139693871783960433010941687652681",
"50488146041935914240995733852881908279",
"335739051656278243327413380483124600405",
"60913723265964344764759755090605907509",
"86392031149929093284849906980765344679",
"264499926750553804313042423468732087693",
"22250743749862459833798573143194867718",
"246647941512292450200794973290425938037",
"261470122523197653988286118475951339486",
"64443631463146432999125207467072930968",
"75542523443999855003389486432701879198",
"120496985442151664039220698293591791486",
"168977980237257346848816565310912536892",
"328640769819922400499373118980069867472",
"315349319289311930473230167343916656275",
"101433768633029119644812177508864216729",
"259126696994610745788070284703892762768",
"68016279372333490959492913188742207023",
"274087150861900926557839371348474125191",
"241044521901011261032024130700929032335",
"17851760586108832879988143141877864396",
"332171579804315898207553387589860257313",
"284465173051568156358107862723076113621",
"85126674497074858855741055108126718051",
"142647599273187872585010554447280631522"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-03ac4a8c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "include/internal/quic_sf_list.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "305218109986914191021907870813775440693",
"length": 1255
},
"id": "CVE-2026-42772-0427eb98",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init_new_stream"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277862496891388677959116519210694512994",
"length": 596
},
"id": "CVE-2026-42772-04bd5a68",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_drop_frames"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312539712076109343417921272776462414397",
"length": 163
},
"id": "CVE-2026-42772-05b2f104",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_destroy"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44294536271167779957387684311281709706",
"length": 734
},
"id": "CVE-2026-42772-095b4efa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_peek"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "55522901989670953180270144733258124152",
"length": 297
},
"id": "CVE-2026-42772-0afe3767",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267099777568336743633569016353309047833",
"length": 1139
},
"id": "CVE-2026-42772-0d640034",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_move_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43408322147033308306663297568300725956",
"length": 1158
},
"id": "CVE-2026-42772-10bd00ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "read_internal"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51530165114433160403394260222310942467",
"length": 82
},
"id": "CVE-2026-42772-1663ed1c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "322138739811019629075225801210567361960",
"length": 834
},
"id": "CVE-2026-42772-1977f15b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_get_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35710244521291487932048844744724237811",
"length": 1829
},
"id": "CVE-2026-42772-1ece073a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_insert"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277862496891388677959116519210694512994",
"length": 596
},
"id": "CVE-2026-42772-1f824c7f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_drop_frames"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244909800755828364743604886146464629238",
"length": 3339
},
"id": "CVE-2026-42772-1fdb016d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_simple"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "332068279764113428399576326624088014448",
"length": 7144
},
"id": "CVE-2026-42772-259e5ad0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "test/quic_txp_test.c",
"function": "run_script"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312539712076109343417921272776462414397",
"length": 163
},
"id": "CVE-2026-42772-2729fa42",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_destroy"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212923793318570138698031989841465154078",
"length": 338
},
"id": "CVE-2026-42772-2971a808",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "append_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "332068279764113428399576326624088014448",
"length": 7144
},
"id": "CVE-2026-42772-2c960e83",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "test/quic_txp_test.c",
"function": "run_script"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1847036928621264111819535755367011710",
"202465124043271441414526682883281670366",
"182848675149595056852372206817224891544",
"71635702378896615314571606895610336244",
"121616954175203626891069966216962447476",
"331025186557538759127229904612525748145",
"45772805910984307907369612672663556974",
"253728294654577913875760746050384113218",
"87047972775929942359636136289558434887",
"63175782093500497565006963949625766383",
"117321889790374484192822993060178557591",
"203618876613136188484341758265168937189",
"258637308207232891898196323250761235980",
"226228245847266913287811777032432902242",
"126769011167610449842607682682337297421",
"219857528483492038215601885030414821097",
"178605098049547155051605985715370488498",
"164964291762211030433856007111612869929",
"23664397047923582904760365150344979500",
"17926128751585991073425241484481125312",
"257830984400422081828062519957492708837",
"195332232508560553042909875874321164837",
"76687205605206399365076519054590320467",
"248901151458016663082314913861142495540",
"189850483604877645377994187056278348257",
"284338412964093874491012911174063537989",
"130701416510907658171651412651538505133",
"75035573464015257265505961603787921",
"73158793028760182265994237520948023095",
"21408917524930410890172326949320606125",
"139956771243854482300568782920338676756",
"176546071226445241465164143505801404581",
"160374146959524104858664107026168530604",
"252238313348058217691968286124057627947",
"335682719749685880847837684725401226759",
"8292284223495575401445479178790651686",
"148148620865750514996009698926165702622",
"287523220909963136439783859880919391746",
"53730405921714967536004124916504669864",
"262436809916690686869037530078369764254",
"222271771346225271074880155597996417167",
"20980261399630854751741528715152181751",
"56743926165408084921327735915669923031",
"83484050225960698320267812224170290866",
"84135062075758105563846200899855170258",
"218192819267759696503922460561179877454",
"253721111209089631705427055232787756570",
"325232518276106959223543274155381213706",
"21024039083433963686506258615553953683",
"84847349433615932499016889291256776315",
"180185712342429610720206773301530503684",
"41509118647645747767058563595849341716",
"89077208983763985041216069661235910159",
"293908236025592713901128263348063176345",
"141095570855681059843281593110369435355",
"292640474476672146479192490688673878194",
"319904184860137559463967832220975785196",
"211092430793839798669522631995371230923",
"229666229844497057214943955818285904109",
"49713559122946543134816873828925173003",
"125427430398184970104374416405161618084",
"248860446964533710720645395383705436170",
"5413981642787651925875612285190197621",
"292901806336644293101685234972975779221",
"208949780266620210510980719954131712992",
"220595219184900726964652143124685297439",
"225378090670791135917783701436217023890",
"199206155950982490507114066085143268393",
"299285786247887670767258548724734855583",
"231857744986850364164217989899114770508",
"167873798786874754280165457986858668900",
"108570963600982421934395952207959329165",
"330573393277582772161231143353221318081",
"81653784092368470659098443285078445832",
"63362464542917221990591584691817513290",
"161634798851045177075590472814651561578",
"44970073759113680945856892535284874142",
"152414364967322888259678959767422442282",
"217291216842021165293320734864485185240",
"119849100592330408858328198024467594203",
"210462687936585908283257705763917044884",
"5703347215361416909572434197090900157",
"203525021730686764369441585468507422021",
"143057379066770821180220285747908171619",
"98400175489368484360252060519761504378",
"225960093921543509068935515336208461432",
"187816131237491918039821039828151923341",
"247479362441567544492183951358566694421",
"192744601304242186393669274133433396330",
"289985522894099835913042846896122498313",
"234671953745781370534916124225428254722",
"294227389329561913473934502212811801209",
"338709228123932273787666316307204881232",
"48238602722014083329508749659303937652",
"198726309785576771506647853688993605115",
"222646318618811181039307762508031132094",
"168980627275409184588117016968311124959",
"147420033782537315513636428266078319567",
"333942435495516353351642494136184523958",
"264357873673190214465093343937655044268",
"97791091940643493289537297447019897539",
"242481092812887490525672622164545078997",
"294624464492232924539254773488731499864",
"120138973316454276862253334903108553941",
"317958355019406931246529234481162723388",
"278460699867587568311169356871989153044",
"252117302439953127438195575120238503368",
"459181183833020082379080230180914740",
"153295385142415980162994486826864834945",
"129848061053861932280703456730082530632",
"269131194038877460442507336629927721486",
"23304501576716483991710631768077288251",
"284448522337645183535421152895534707059",
"172270108755823115002382921196152283103",
"138033038281520206811292917948862772139",
"70189949436765229131349102711651084037",
"122955963386717971389016493229470852413",
"263719088117657741694893370528425080301",
"240854735194448697911668532120962534992",
"327467437470546665655462251590938486492",
"74742817607924938383471577672824522928",
"8878724121716213913379945125050936950",
"307640335027800154585849706905076649255",
"53970322087320858165616154177622917440",
"307511422285356667256923995460736736693",
"81400502079721183389097563667559766294",
"296866938541959374565972404935892747690",
"291643206527361066300532648599753855900",
"231403375988989713292989907846983209482",
"179753822049532774926306426995292885655",
"100275818641629518855384437726604844286",
"271632227171045609848350410177950031209",
"17212366359210910799006897376467472063",
"199795561475552305090979746425601241244",
"248807373363654696515483716037365985277",
"273504240806799927871830869408788739132",
"198267373956046252586815549219475626478",
"147456649504443055051554728422353979269",
"67805126067202056499454439094497785911",
"19610355184124251694261222556579979520",
"211043930664007293416204276754153603837",
"107859307344272373760216324217018572851",
"330654728024831037834589208296141371706",
"220657652674624673992056624202008611821",
"289974224447860472770779732956975370212",
"76026136918848368236768876313896689660",
"182836574019101566875337977521503944181",
"139843395392747253736210180203856875249"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-2c9d6c2c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "55522901989670953180270144733258124152",
"length": 297
},
"id": "CVE-2026-42772-2d366a00",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_new"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74982952992512837697763897863522399078",
"15702048738703884791018972500621750430",
"30217698469473948620381156528397228644",
"15418341913198226796215743738609056227",
"251096765005090319504889546114149997680",
"88302358428984097386351674214622715282",
"2274527460099654616537659100879562852",
"28718623823028515959628632826284628425",
"154764489937455182967050040849570189931",
"39818892158206915884604993702539825262",
"86953090453655455773853381835623188899",
"54244873952576324837807982912564755675",
"176335429191699146191315492789987832187",
"259675170082018150944166443902461607264",
"299688469428359914052703460960735378645",
"210291232230063534591685563510371207564",
"188835798985544140645237467208445771918",
"134578425584113512067471791360351216757",
"220564256378280189869235656187725665541",
"193652334448711249288348647292637115721",
"322302891649217076454048362925853615061",
"93095489399073747257217122447501560483",
"199287374616985117199183157939555059511",
"38743645476131273231947333803363463783",
"322993986933642993853397002795313364154",
"44938187670605791044264619204138293787",
"336450401302963866029466659503425610779",
"293612648640860443062744349112085705243",
"204127523256118809333414136583048267020",
"172678050849936068267305302836139259615",
"301813512733488056965461724298306380513",
"53101454320083407952061225175309906060",
"251041877666100627443319352429783081688",
"326580687469054357586751037316928824424",
"182293030699339954646837949130814158445",
"120696306434539158853410258643981163887",
"326526621604369766707541232209708662458",
"296169874435605005992616184551214916477",
"85952871538732393255091306026472570957",
"32462257429648480190948414041237365986",
"271547679852182094097248491395607872664",
"325911930538046759544430293960692608065",
"229716967277970641422840382071419857118",
"304264180724459825290074022344776482497",
"139397178314383664334014644875358443926",
"150158455059481782470721430279088103533",
"68808997123544403911381216965266460207",
"318677933618695683849752466604241630829",
"128780724656586098031897267155378454791",
"145764443811219732965463382935906927907",
"117797497819433647434404979436007623046",
"335664023135301896224503717844192248884",
"310303921866258122822298620414494485796",
"59541286750627321930004757901770204584",
"140128288316842067932719548516610946263",
"112546572777950385859325903403522974686",
"80250697301882567512707463927405856388",
"207592187379379532759439694392596985879",
"246943373235751861850845449375568638438",
"114831047080139332432934323222396005777",
"112249358039051029942555566430220290980",
"63140869223008638083630081088135316493",
"93443933810209268896312473253347812986",
"330181464020681772700485241154225232724",
"12068035771325417527203826490401603779",
"316858335656056706927566747629018656260",
"307503639906905683365807557291801421087",
"232519061379694312111035123825554593914",
"4414017253118807214568235473502517976",
"259240487729211622098932099491624775942",
"171391038222135530542701904478475553347",
"268767643577161966407876259432132820761",
"3252694324677151239787193839151141399",
"160773095775561886745568421399400028059",
"143928432549034432491519309981712135689",
"139018470152237091324908525058898755499",
"178851584046652499098897063121874749919",
"228327307683501486632545704281528371929",
"256522890669538612493938411612321337704",
"106720317564141894259003793912597325216",
"134556468008788775688422817823489757337",
"15466118066416028998674512662228169886",
"338248441931815505983006366872839456535",
"28405321222999431966401744364792601711",
"199741757413801582654768916607591652952",
"265280860152471248742819779431711374525",
"123145397054225372180644463910931756173",
"307054047939883917330218862657951401740",
"243188396105832322123649285843458970038",
"72772641957785682600233300736788942681",
"226550161759984691551790138251186288466",
"239337703459583122269659421890422252833",
"337102778577650533181820282344650941863",
"312595429495779087537517041418923332577",
"312874327354973703442507141455498998969",
"137863977020284742337547796292697490192",
"180720957443477280891893485219463732984",
"330066457032318413708184793744483504878",
"239700592761543194299266108490057805988",
"172909037658856170992714550693859885716",
"144301889437000119445947006656446613276",
"221248431158332224268051039178941134810",
"116722399909404171749516468427420878358",
"42585647292926150957059195691437571986",
"241059176636518817396294052547999372531",
"131409213723182011842646755267713590705",
"22455804086932222761536974722298393286",
"150921592284850817702514256878598031838",
"210954383329174138526799308780506019551",
"226652328043815124823241692293154654697",
"269799866923054504123497837675934907490",
"7158629404373098867190199239541665150",
"266850280780283924092638140660620132184",
"170883036669198029976347911290962920613",
"7535545833173790461894049451890477197",
"241296535558428515090495823744193132827",
"12572628083864896725607408929640895039",
"309256638355544634972334119548851321472",
"114923810077326344086862205065842406333",
"339884561625969263018149398850987386968",
"291018636631442687913874023778987468496",
"238584775571908755745328056140317943305",
"191135242630038015667486294387278750556",
"4897488741245746203349309311489657584",
"107187519163216690551899506263947449246",
"197863284818816715303956699469365599079",
"279774897363816218865356902410637429196",
"207053318488155142306215391798166130175",
"212594012398040671707799299258442067548",
"209300279767321030902268441461185957539",
"120088679894527914529237950697148319235",
"73491864813573394822236303865105864887",
"36576091309524540364410121787311274299",
"321474069263271175019953577421806536713",
"294714307001331078283332142619951934281",
"96740416428554827288232396984424725257",
"215318358335473900753966247598906426606",
"229689064938110259326547822313840300223",
"63950322305318066533272089201660207005",
"277772318153601411675350566017043473788",
"292870839890739344254433660965522263256",
"150060481162638277854157602964216631943",
"15258739925529875255033614717670001099",
"170488746979735510910845426877186478226",
"329847705114022725511203662541028318752",
"304241553467205304990275600084706363410",
"304222811352592105158788720767636774210",
"82812394471140042762868889138577508192",
"215725707688038327683320105797722646552",
"302195121224950311346070832975267274710",
"71590190446226853986744289794619157891",
"189445953622532142935500215122293178028",
"132534778989463090186213282853886044509",
"248196491088567862697717198729773428412",
"187933951228454824654899876750571592925",
"286149884297231764049244360081601617411",
"31929230917419371334993247740594094529",
"194771639557540278985678673614613933418",
"173426973193771581121366604962528732849",
"268287984699850420388080335271023586620",
"103762410759443453791557506665828282173",
"322666787091023982528294286685291721857",
"102121325895692814832135560670375583351",
"277910638057787292824982181124932303887",
"121308223306250727907117984201924435079",
"286248731093937548414168915298138195060",
"233000697251743719950894642637966340566",
"25852397973431133322162571419358225569",
"236605743371064517977033621688618278381",
"321078846217946552235845379286057582069",
"312744421835880846662254186450391368083",
"39394817286257661701331915584773642578",
"204812086753759158389519430712119450898",
"239696636926851664944184754041906980907",
"23181543169066764319614012720712985232",
"167279804022487815422627429216037680315",
"202846738127111647059250096659398004075",
"89074736780374400923905476565979109971",
"187474822068771904195636316382048098475",
"296704217385461805622454300248134453907",
"36147087836177612431564580677594260356",
"114431342733261657493147961982738213982",
"31619335960180050910860955592756297079",
"127784072306378918924071605968959891940",
"307918673083981849063974005776876277187",
"14091775278900149276947423096532477428",
"41195021204452320468685642185345485712",
"74467383958604377626236180802887331292",
"109622723569694904280827276058346057992",
"250208027806642411636479462402389689988",
"149974306530630350882994476915805109614",
"271807812691742844443393973386883271379",
"79623409142686166989063257787961067035",
"257778818996373470560122270974450178679",
"106514675030180008857296460161711624501",
"16885211060579656150610020524966802821",
"290183135770766169566698631598435151323",
"170833195905115912244568525492041221278",
"223156625022380373067864553983783198133",
"124449259833492082729400693315502938024",
"183396743928637156444618726850761097638",
"127616664925366548076763128610090026269",
"30244778309677109702390822226273236734",
"105654652000506801185826448751421812149",
"53390993166150096152322120790927897506",
"6177191553342952940082033978166114462",
"138395510756940379574320825946233950396",
"257784493549634311603072295236364182003",
"290395309714773214859784111900383617977",
"155582648464694058382243635621938854323",
"26811927573755595154940631732223613497",
"45884826869121298693042415550273206357",
"42753404299853030889694474465202403505",
"281799180620743057420261890216035815580",
"81954482607419111049196859689141640018",
"143159801882378407362071314048044178319",
"141659870395169733630157802405686858377",
"29305975265914232951978722759001679139",
"120913315643664170586011395469143523075",
"166609691269677817616934899634534774010",
"179210382508354396668377746462428106763",
"277707851977169503824444431826364441605",
"86699242798227825977890915484550976442",
"254676441165477685396121809765316350869",
"305721408783499461140335280661198638301",
"95921240503838308267107736697632392416",
"269810215215748192322632260105332352070",
"114214583309567426879767248477506504728",
"79753913146901665246586427287067329632",
"262357558656561569036812920291289798279",
"166748300649933212859204276448548196596",
"67736482824392804199979352248531795068",
"277703927141267464142196773975057772115",
"160538696447741281716761077466887394355",
"21008022175420935297804498447756558083",
"74832733730310273037987976254577701249",
"41318171004241418959110994022114730037",
"146842236006025779024705225048309641739",
"157616850624501327913961022269222499561",
"182967459727676477038962903115186135485",
"315401333192851121456529104876678261712",
"78747773755033979315387024884736102685",
"203726844122887756660823691235756028727",
"221665520286143046305238010524297577812",
"11646000621658023512656480258462890804"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-2d896e0b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329214909560980011714403049806713936372",
"length": 165
},
"id": "CVE-2026-42772-2e6c2aef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_move_to_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "56484980933439547770400199841039057838",
"length": 187
},
"id": "CVE-2026-42772-342018f3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_resize_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43408322147033308306663297568300725956",
"length": 1158
},
"id": "CVE-2026-42772-3692a7ad",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "read_internal"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"219088758207279360465464888903606683650",
"116376747991036995909624509498810891651",
"81072655478016841923780309463447521691",
"3791292666834113610056955047681827076",
"179711918729133432799623693273309285286",
"320012250884146612671137240495702580845",
"276355068374831338066911802102356037898",
"229191807132692901553336060033332678300",
"298110122536047293553873602728046220640",
"68446419820288047713484697530195201323",
"171422480279223338357472966354816538842",
"312321492965499404365598855271843531559",
"323728823464713661261707101100111539787",
"75737399536901864105057781540203625330",
"251147473206350666375021370180900144912",
"310629257677570173920517563680372183750",
"167898902698833210596374343765608691449",
"230400327183360371472659610340825952387",
"283093954115580308770555876682548999806",
"197311866571106643922841026664309723191",
"267464522610391505461921043080150448344",
"244632658966386308388475814367648308572",
"45556488121138963934220619669935950557",
"93492139665658478780067802079190951340",
"28384286662551403003956561752550344103",
"245597145759999697480973879212727930917",
"139556462577735360869016144394330572544",
"310387087745835787508209246957172236050",
"271298114825256931569512788384705523062",
"179194564108871655704702698406076162005",
"153562869532853394232281988275524779254",
"10205319571856943185262924763776633892",
"319889042674264695029774917377287586913",
"237004311980205896483869044738948996432",
"217325368392753923817954656669340631226",
"200037104842219501598231777416655200114",
"102916721821756277762098854053523505247",
"24590880306226349429240626684916883960",
"34479091979543750697156400454647208879",
"218560498904075883593423685886012083199"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-37b6c987",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "test/quic_stream_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "11223152413731156670321651280427842720",
"length": 5852
},
"id": "CVE-2026-42772-3b52d54a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"274193825400842225462124594030315148599",
"322714817412923969402987045145288481376",
"321576787613400722634599292063338323801",
"187252652548141966679513484160341652123",
"209695279590137918582993744475413307522",
"121064765340631503432539733560239363776",
"109361813063782744777804979382876125462",
"107455238247424988587496667315973095962",
"75333527572042543942049363917993383474",
"237350151895075963617548733587778970066",
"263914276315074857373741611669600544345",
"2323896793620023012935374184147820790",
"123106796925604915990683442800092496826",
"60688730619562135954720005353398448285",
"278426619377439693542039504038059342967"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-3c05ce4b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "include/internal/quic_stream.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26941170518650191032116771372484578691",
"length": 191
},
"id": "CVE-2026-42772-3d4e08d3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_free"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74982952992512837697763897863522399078",
"15702048738703884791018972500621750430",
"30217698469473948620381156528397228644",
"15418341913198226796215743738609056227",
"251096765005090319504889546114149997680",
"88302358428984097386351674214622715282",
"2274527460099654616537659100879562852",
"28718623823028515959628632826284628425",
"154764489937455182967050040849570189931",
"39818892158206915884604993702539825262",
"86953090453655455773853381835623188899",
"54244873952576324837807982912564755675",
"176335429191699146191315492789987832187",
"259675170082018150944166443902461607264",
"299688469428359914052703460960735378645",
"210291232230063534591685563510371207564",
"188835798985544140645237467208445771918",
"134578425584113512067471791360351216757",
"220564256378280189869235656187725665541",
"193652334448711249288348647292637115721",
"322302891649217076454048362925853615061",
"93095489399073747257217122447501560483",
"199287374616985117199183157939555059511",
"38743645476131273231947333803363463783",
"322993986933642993853397002795313364154",
"44938187670605791044264619204138293787",
"336450401302963866029466659503425610779",
"293612648640860443062744349112085705243",
"204127523256118809333414136583048267020",
"172678050849936068267305302836139259615",
"301813512733488056965461724298306380513",
"53101454320083407952061225175309906060",
"251041877666100627443319352429783081688",
"326580687469054357586751037316928824424",
"182293030699339954646837949130814158445",
"120696306434539158853410258643981163887",
"326526621604369766707541232209708662458",
"296169874435605005992616184551214916477",
"85952871538732393255091306026472570957",
"32462257429648480190948414041237365986",
"271547679852182094097248491395607872664",
"325911930538046759544430293960692608065",
"229716967277970641422840382071419857118",
"304264180724459825290074022344776482497",
"139397178314383664334014644875358443926",
"150158455059481782470721430279088103533",
"68808997123544403911381216965266460207",
"318677933618695683849752466604241630829",
"128780724656586098031897267155378454791",
"145764443811219732965463382935906927907",
"117797497819433647434404979436007623046",
"335664023135301896224503717844192248884",
"310303921866258122822298620414494485796",
"59541286750627321930004757901770204584",
"140128288316842067932719548516610946263",
"112546572777950385859325903403522974686",
"80250697301882567512707463927405856388",
"207592187379379532759439694392596985879",
"246943373235751861850845449375568638438",
"114831047080139332432934323222396005777",
"112249358039051029942555566430220290980",
"63140869223008638083630081088135316493",
"93443933810209268896312473253347812986",
"330181464020681772700485241154225232724",
"12068035771325417527203826490401603779",
"316858335656056706927566747629018656260",
"307503639906905683365807557291801421087",
"232519061379694312111035123825554593914",
"4414017253118807214568235473502517976",
"259240487729211622098932099491624775942",
"171391038222135530542701904478475553347",
"268767643577161966407876259432132820761",
"3252694324677151239787193839151141399",
"160773095775561886745568421399400028059",
"143928432549034432491519309981712135689",
"139018470152237091324908525058898755499",
"178851584046652499098897063121874749919",
"228327307683501486632545704281528371929",
"256522890669538612493938411612321337704",
"106720317564141894259003793912597325216",
"134556468008788775688422817823489757337",
"15466118066416028998674512662228169886",
"338248441931815505983006366872839456535",
"28405321222999431966401744364792601711",
"199741757413801582654768916607591652952",
"265280860152471248742819779431711374525",
"123145397054225372180644463910931756173",
"307054047939883917330218862657951401740",
"243188396105832322123649285843458970038",
"72772641957785682600233300736788942681",
"226550161759984691551790138251186288466",
"239337703459583122269659421890422252833",
"337102778577650533181820282344650941863",
"312595429495779087537517041418923332577",
"312874327354973703442507141455498998969",
"137863977020284742337547796292697490192",
"180720957443477280891893485219463732984",
"330066457032318413708184793744483504878",
"239700592761543194299266108490057805988",
"172909037658856170992714550693859885716",
"144301889437000119445947006656446613276",
"221248431158332224268051039178941134810",
"116722399909404171749516468427420878358",
"42585647292926150957059195691437571986",
"241059176636518817396294052547999372531",
"131409213723182011842646755267713590705",
"22455804086932222761536974722298393286",
"150921592284850817702514256878598031838",
"210954383329174138526799308780506019551",
"226652328043815124823241692293154654697",
"269799866923054504123497837675934907490",
"7158629404373098867190199239541665150",
"266850280780283924092638140660620132184",
"170883036669198029976347911290962920613",
"7535545833173790461894049451890477197",
"241296535558428515090495823744193132827",
"12572628083864896725607408929640895039",
"309256638355544634972334119548851321472",
"114923810077326344086862205065842406333",
"339884561625969263018149398850987386968",
"291018636631442687913874023778987468496",
"238584775571908755745328056140317943305",
"191135242630038015667486294387278750556",
"4897488741245746203349309311489657584",
"107187519163216690551899506263947449246",
"197863284818816715303956699469365599079",
"279774897363816218865356902410637429196",
"207053318488155142306215391798166130175",
"212594012398040671707799299258442067548",
"209300279767321030902268441461185957539",
"120088679894527914529237950697148319235",
"73491864813573394822236303865105864887",
"36576091309524540364410121787311274299",
"321474069263271175019953577421806536713",
"294714307001331078283332142619951934281",
"96740416428554827288232396984424725257",
"215318358335473900753966247598906426606",
"229689064938110259326547822313840300223",
"63950322305318066533272089201660207005",
"277772318153601411675350566017043473788",
"292870839890739344254433660965522263256",
"150060481162638277854157602964216631943",
"15258739925529875255033614717670001099",
"170488746979735510910845426877186478226",
"329847705114022725511203662541028318752",
"304241553467205304990275600084706363410",
"304222811352592105158788720767636774210",
"82812394471140042762868889138577508192",
"215725707688038327683320105797722646552",
"302195121224950311346070832975267274710",
"71590190446226853986744289794619157891",
"189445953622532142935500215122293178028",
"132534778989463090186213282853886044509",
"248196491088567862697717198729773428412",
"187933951228454824654899876750571592925",
"286149884297231764049244360081601617411",
"31929230917419371334993247740594094529",
"194771639557540278985678673614613933418",
"173426973193771581121366604962528732849",
"268287984699850420388080335271023586620",
"103762410759443453791557506665828282173",
"322666787091023982528294286685291721857",
"102121325895692814832135560670375583351",
"277910638057787292824982181124932303887",
"121308223306250727907117984201924435079",
"286248731093937548414168915298138195060",
"233000697251743719950894642637966340566",
"25852397973431133322162571419358225569",
"236605743371064517977033621688618278381",
"321078846217946552235845379286057582069",
"312744421835880846662254186450391368083",
"39394817286257661701331915584773642578",
"204812086753759158389519430712119450898",
"239696636926851664944184754041906980907",
"23181543169066764319614012720712985232",
"167279804022487815422627429216037680315",
"202846738127111647059250096659398004075",
"89074736780374400923905476565979109971",
"187474822068771904195636316382048098475",
"296704217385461805622454300248134453907",
"36147087836177612431564580677594260356",
"114431342733261657493147961982738213982",
"31619335960180050910860955592756297079",
"127784072306378918924071605968959891940",
"307918673083981849063974005776876277187",
"14091775278900149276947423096532477428",
"41195021204452320468685642185345485712",
"74467383958604377626236180802887331292",
"109622723569694904280827276058346057992",
"250208027806642411636479462402389689988",
"149974306530630350882994476915805109614",
"271807812691742844443393973386883271379",
"79623409142686166989063257787961067035",
"257778818996373470560122270974450178679",
"106514675030180008857296460161711624501",
"16885211060579656150610020524966802821",
"290183135770766169566698631598435151323",
"170833195905115912244568525492041221278",
"223156625022380373067864553983783198133",
"124449259833492082729400693315502938024",
"183396743928637156444618726850761097638",
"127616664925366548076763128610090026269",
"30244778309677109702390822226273236734",
"105654652000506801185826448751421812149",
"53390993166150096152322120790927897506",
"6177191553342952940082033978166114462",
"138395510756940379574320825946233950396",
"257784493549634311603072295236364182003",
"290395309714773214859784111900383617977",
"155582648464694058382243635621938854323",
"26811927573755595154940631732223613497",
"45884826869121298693042415550273206357",
"42753404299853030889694474465202403505",
"281799180620743057420261890216035815580",
"81954482607419111049196859689141640018",
"143159801882378407362071314048044178319",
"141659870395169733630157802405686858377",
"29305975265914232951978722759001679139",
"120913315643664170586011395469143523075",
"166609691269677817616934899634534774010",
"179210382508354396668377746462428106763",
"277707851977169503824444431826364441605",
"86699242798227825977890915484550976442",
"254676441165477685396121809765316350869",
"305721408783499461140335280661198638301",
"95921240503838308267107736697632392416",
"269810215215748192322632260105332352070",
"114214583309567426879767248477506504728",
"79753913146901665246586427287067329632",
"262357558656561569036812920291289798279",
"166748300649933212859204276448548196596",
"67736482824392804199979352248531795068",
"277703927141267464142196773975057772115",
"160538696447741281716761077466887394355",
"21008022175420935297804498447756558083",
"74832733730310273037987976254577701249",
"41318171004241418959110994022114730037",
"146842236006025779024705225048309641739",
"157616850624501327913961022269222499561",
"182967459727676477038962903115186135485",
"315401333192851121456529104876678261712",
"78747773755033979315387024884736102685",
"203726844122887756660823691235756028727",
"221665520286143046305238010524297577812",
"11646000621658023512656480258462890804"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-3dcecc7c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51530165114433160403394260222310942467",
"length": 82
},
"id": "CVE-2026-42772-3ee078c0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302381606908832949459035827693412071641",
"length": 580
},
"id": "CVE-2026-42772-3f306385",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_release_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302381606908832949459035827693412071641",
"length": 580
},
"id": "CVE-2026-42772-438b9681",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_release_record"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149277620116763594184016471133333909935",
"135138906398501142315395202377649750725",
"177806783948542615463730364570848041960",
"193939670127551415855466748785685983336",
"128008086679263998882818631622525195996",
"62292985423794325731291578761257742232",
"118807928303972316311153125423834778669",
"157305375942254888975272818804339083525"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-44495fe4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_channel.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35710244521291487932048844744724237811",
"length": 1829
},
"id": "CVE-2026-42772-48cb4ef9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_insert"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105960036292580160630930316175941048180",
"length": 2930
},
"id": "CVE-2026-42772-4af77925",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_random"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238511161799166800619205736865658440770",
"length": 5839
},
"id": "CVE-2026-42772-4de9ce1b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258837977996044416827128866060614669807",
"length": 381
},
"id": "CVE-2026-42772-4f6ec9d1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_available"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"122232164220730160483876675223252905796",
"24867354923865899556808014148627534341",
"104090172763448324812671966987632762635",
"293952632211513235730263842456915555042"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-4fb1058c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "test/quic_txp_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44294536271167779957387684311281709706",
"length": 734
},
"id": "CVE-2026-42772-50611f1d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_peek"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43408322147033308306663297568300725956",
"length": 1158
},
"id": "CVE-2026-42772-50c5b4ed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "read_internal"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277862496891388677959116519210694512994",
"length": 596
},
"id": "CVE-2026-42772-58ed30cc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_drop_frames"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "305218109986914191021907870813775440693",
"length": 1255
},
"id": "CVE-2026-42772-5ac19ad5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init_new_stream"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105960036292580160630930316175941048180",
"length": 2930
},
"id": "CVE-2026-42772-5b96f51a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_random"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"274193825400842225462124594030315148599",
"322714817412923969402987045145288481376",
"321576787613400722634599292063338323801",
"187252652548141966679513484160341652123",
"209695279590137918582993744475413307522",
"121064765340631503432539733560239363776",
"109361813063782744777804979382876125462",
"107455238247424988587496667315973095962",
"75333527572042543942049363917993383474",
"237350151895075963617548733587778970066",
"263914276315074857373741611669600544345",
"2323896793620023012935374184147820790",
"123106796925604915990683442800092496826",
"60688730619562135954720005353398448285",
"278426619377439693542039504038059342967"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-5f5667d9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "include/internal/quic_stream.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74982952992512837697763897863522399078",
"15702048738703884791018972500621750430",
"30217698469473948620381156528397228644",
"15418341913198226796215743738609056227",
"251096765005090319504889546114149997680",
"88302358428984097386351674214622715282",
"2274527460099654616537659100879562852",
"28718623823028515959628632826284628425",
"154764489937455182967050040849570189931",
"39818892158206915884604993702539825262",
"86953090453655455773853381835623188899",
"54244873952576324837807982912564755675",
"176335429191699146191315492789987832187",
"259675170082018150944166443902461607264",
"299688469428359914052703460960735378645",
"210291232230063534591685563510371207564",
"188835798985544140645237467208445771918",
"134578425584113512067471791360351216757",
"220564256378280189869235656187725665541",
"193652334448711249288348647292637115721",
"322302891649217076454048362925853615061",
"93095489399073747257217122447501560483",
"199287374616985117199183157939555059511",
"38743645476131273231947333803363463783",
"322993986933642993853397002795313364154",
"44938187670605791044264619204138293787",
"336450401302963866029466659503425610779",
"293612648640860443062744349112085705243",
"204127523256118809333414136583048267020",
"172678050849936068267305302836139259615",
"301813512733488056965461724298306380513",
"53101454320083407952061225175309906060",
"251041877666100627443319352429783081688",
"326580687469054357586751037316928824424",
"182293030699339954646837949130814158445",
"120696306434539158853410258643981163887",
"326526621604369766707541232209708662458",
"296169874435605005992616184551214916477",
"85952871538732393255091306026472570957",
"32462257429648480190948414041237365986",
"271547679852182094097248491395607872664",
"325911930538046759544430293960692608065",
"229716967277970641422840382071419857118",
"304264180724459825290074022344776482497",
"139397178314383664334014644875358443926",
"150158455059481782470721430279088103533",
"68808997123544403911381216965266460207",
"318677933618695683849752466604241630829",
"128780724656586098031897267155378454791",
"145764443811219732965463382935906927907",
"117797497819433647434404979436007623046",
"335664023135301896224503717844192248884",
"310303921866258122822298620414494485796",
"59541286750627321930004757901770204584",
"140128288316842067932719548516610946263",
"112546572777950385859325903403522974686",
"80250697301882567512707463927405856388",
"207592187379379532759439694392596985879",
"246943373235751861850845449375568638438",
"114831047080139332432934323222396005777",
"112249358039051029942555566430220290980",
"63140869223008638083630081088135316493",
"93443933810209268896312473253347812986",
"330181464020681772700485241154225232724",
"12068035771325417527203826490401603779",
"316858335656056706927566747629018656260",
"307503639906905683365807557291801421087",
"232519061379694312111035123825554593914",
"4414017253118807214568235473502517976",
"259240487729211622098932099491624775942",
"171391038222135530542701904478475553347",
"268767643577161966407876259432132820761",
"3252694324677151239787193839151141399",
"160773095775561886745568421399400028059",
"143928432549034432491519309981712135689",
"139018470152237091324908525058898755499",
"178851584046652499098897063121874749919",
"228327307683501486632545704281528371929",
"256522890669538612493938411612321337704",
"106720317564141894259003793912597325216",
"134556468008788775688422817823489757337",
"15466118066416028998674512662228169886",
"338248441931815505983006366872839456535",
"28405321222999431966401744364792601711",
"199741757413801582654768916607591652952",
"265280860152471248742819779431711374525",
"123145397054225372180644463910931756173",
"307054047939883917330218862657951401740",
"243188396105832322123649285843458970038",
"72772641957785682600233300736788942681",
"226550161759984691551790138251186288466",
"239337703459583122269659421890422252833",
"337102778577650533181820282344650941863",
"312595429495779087537517041418923332577",
"312874327354973703442507141455498998969",
"137863977020284742337547796292697490192",
"180720957443477280891893485219463732984",
"330066457032318413708184793744483504878",
"239700592761543194299266108490057805988",
"172909037658856170992714550693859885716",
"144301889437000119445947006656446613276",
"221248431158332224268051039178941134810",
"116722399909404171749516468427420878358",
"42585647292926150957059195691437571986",
"241059176636518817396294052547999372531",
"131409213723182011842646755267713590705",
"22455804086932222761536974722298393286",
"150921592284850817702514256878598031838",
"210954383329174138526799308780506019551",
"226652328043815124823241692293154654697",
"269799866923054504123497837675934907490",
"7158629404373098867190199239541665150",
"266850280780283924092638140660620132184",
"170883036669198029976347911290962920613",
"7535545833173790461894049451890477197",
"241296535558428515090495823744193132827",
"12572628083864896725607408929640895039",
"309256638355544634972334119548851321472",
"114923810077326344086862205065842406333",
"339884561625969263018149398850987386968",
"291018636631442687913874023778987468496",
"238584775571908755745328056140317943305",
"191135242630038015667486294387278750556",
"4897488741245746203349309311489657584",
"107187519163216690551899506263947449246",
"197863284818816715303956699469365599079",
"279774897363816218865356902410637429196",
"207053318488155142306215391798166130175",
"212594012398040671707799299258442067548",
"209300279767321030902268441461185957539",
"120088679894527914529237950697148319235",
"73491864813573394822236303865105864887",
"36576091309524540364410121787311274299",
"321474069263271175019953577421806536713",
"294714307001331078283332142619951934281",
"96740416428554827288232396984424725257",
"215318358335473900753966247598906426606",
"229689064938110259326547822313840300223",
"63950322305318066533272089201660207005",
"277772318153601411675350566017043473788",
"292870839890739344254433660965522263256",
"150060481162638277854157602964216631943",
"15258739925529875255033614717670001099",
"170488746979735510910845426877186478226",
"329847705114022725511203662541028318752",
"304241553467205304990275600084706363410",
"304222811352592105158788720767636774210",
"82812394471140042762868889138577508192",
"215725707688038327683320105797722646552",
"302195121224950311346070832975267274710",
"71590190446226853986744289794619157891",
"189445953622532142935500215122293178028",
"132534778989463090186213282853886044509",
"248196491088567862697717198729773428412",
"187933951228454824654899876750571592925",
"286149884297231764049244360081601617411",
"31929230917419371334993247740594094529",
"194771639557540278985678673614613933418",
"173426973193771581121366604962528732849",
"268287984699850420388080335271023586620",
"103762410759443453791557506665828282173",
"322666787091023982528294286685291721857",
"102121325895692814832135560670375583351",
"277910638057787292824982181124932303887",
"121308223306250727907117984201924435079",
"286248731093937548414168915298138195060",
"233000697251743719950894642637966340566",
"25852397973431133322162571419358225569",
"236605743371064517977033621688618278381",
"321078846217946552235845379286057582069",
"312744421835880846662254186450391368083",
"39394817286257661701331915584773642578",
"204812086753759158389519430712119450898",
"239696636926851664944184754041906980907",
"23181543169066764319614012720712985232",
"167279804022487815422627429216037680315",
"202846738127111647059250096659398004075",
"89074736780374400923905476565979109971",
"187474822068771904195636316382048098475",
"296704217385461805622454300248134453907",
"36147087836177612431564580677594260356",
"114431342733261657493147961982738213982",
"31619335960180050910860955592756297079",
"127784072306378918924071605968959891940",
"307918673083981849063974005776876277187",
"14091775278900149276947423096532477428",
"41195021204452320468685642185345485712",
"74467383958604377626236180802887331292",
"109622723569694904280827276058346057992",
"250208027806642411636479462402389689988",
"149974306530630350882994476915805109614",
"271807812691742844443393973386883271379",
"79623409142686166989063257787961067035",
"257778818996373470560122270974450178679",
"106514675030180008857296460161711624501",
"16885211060579656150610020524966802821",
"290183135770766169566698631598435151323",
"170833195905115912244568525492041221278",
"223156625022380373067864553983783198133",
"124449259833492082729400693315502938024",
"183396743928637156444618726850761097638",
"127616664925366548076763128610090026269",
"30244778309677109702390822226273236734",
"105654652000506801185826448751421812149",
"53390993166150096152322120790927897506",
"6177191553342952940082033978166114462",
"138395510756940379574320825946233950396",
"257784493549634311603072295236364182003",
"290395309714773214859784111900383617977",
"155582648464694058382243635621938854323",
"26811927573755595154940631732223613497",
"45884826869121298693042415550273206357",
"42753404299853030889694474465202403505",
"281799180620743057420261890216035815580",
"81954482607419111049196859689141640018",
"143159801882378407362071314048044178319",
"141659870395169733630157802405686858377",
"29305975265914232951978722759001679139",
"120913315643664170586011395469143523075",
"166609691269677817616934899634534774010",
"179210382508354396668377746462428106763",
"277707851977169503824444431826364441605",
"86699242798227825977890915484550976442",
"254676441165477685396121809765316350869",
"305721408783499461140335280661198638301",
"95921240503838308267107736697632392416",
"269810215215748192322632260105332352070",
"114214583309567426879767248477506504728",
"79753913146901665246586427287067329632",
"262357558656561569036812920291289798279",
"166748300649933212859204276448548196596",
"67736482824392804199979352248531795068",
"277703927141267464142196773975057772115",
"160538696447741281716761077466887394355",
"21008022175420935297804498447756558083",
"74832733730310273037987976254577701249",
"41318171004241418959110994022114730037",
"146842236006025779024705225048309641739",
"157616850624501327913961022269222499561",
"182967459727676477038962903115186135485",
"315401333192851121456529104876678261712",
"78747773755033979315387024884736102685",
"203726844122887756660823691235756028727",
"221665520286143046305238010524297577812",
"11646000621658023512656480258462890804"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-606d366a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "216210175721049241972872924581066586448",
"length": 269
},
"id": "CVE-2026-42772-66934f78",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212923793318570138698031989841465154078",
"length": 338
},
"id": "CVE-2026-42772-6a10fb70",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "append_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35710244521291487932048844744724237811",
"length": 1829
},
"id": "CVE-2026-42772-6bf479ba",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_insert"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "88184073817359544520676592770664754545",
"length": 283
},
"id": "CVE-2026-42772-6c9edd85",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_lock_head"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238511161799166800619205736865658440770",
"length": 5839
},
"id": "CVE-2026-42772-715b83d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25112157648864915220267900697270222453",
"length": 80
},
"id": "CVE-2026-42772-71932677",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_set_cleanse"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "305218109986914191021907870813775440693",
"length": 1255
},
"id": "CVE-2026-42772-728159a4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init_new_stream"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1847036928621264111819535755367011710",
"202465124043271441414526682883281670366",
"182848675149595056852372206817224891544",
"71635702378896615314571606895610336244",
"121616954175203626891069966216962447476",
"331025186557538759127229904612525748145",
"45772805910984307907369612672663556974",
"253728294654577913875760746050384113218",
"87047972775929942359636136289558434887",
"63175782093500497565006963949625766383",
"117321889790374484192822993060178557591",
"203618876613136188484341758265168937189",
"258637308207232891898196323250761235980",
"226228245847266913287811777032432902242",
"126769011167610449842607682682337297421",
"219857528483492038215601885030414821097",
"178605098049547155051605985715370488498",
"164964291762211030433856007111612869929",
"23664397047923582904760365150344979500",
"17926128751585991073425241484481125312",
"257830984400422081828062519957492708837",
"195332232508560553042909875874321164837",
"76687205605206399365076519054590320467",
"248901151458016663082314913861142495540",
"189850483604877645377994187056278348257",
"284338412964093874491012911174063537989",
"130701416510907658171651412651538505133",
"75035573464015257265505961603787921",
"73158793028760182265994237520948023095",
"21408917524930410890172326949320606125",
"139956771243854482300568782920338676756",
"176546071226445241465164143505801404581",
"160374146959524104858664107026168530604",
"252238313348058217691968286124057627947",
"335682719749685880847837684725401226759",
"8292284223495575401445479178790651686",
"148148620865750514996009698926165702622",
"287523220909963136439783859880919391746",
"53730405921714967536004124916504669864",
"262436809916690686869037530078369764254",
"222271771346225271074880155597996417167",
"20980261399630854751741528715152181751",
"56743926165408084921327735915669923031",
"83484050225960698320267812224170290866",
"84135062075758105563846200899855170258",
"218192819267759696503922460561179877454",
"253721111209089631705427055232787756570",
"325232518276106959223543274155381213706",
"21024039083433963686506258615553953683",
"84847349433615932499016889291256776315",
"180185712342429610720206773301530503684",
"41509118647645747767058563595849341716",
"89077208983763985041216069661235910159",
"293908236025592713901128263348063176345",
"141095570855681059843281593110369435355",
"292640474476672146479192490688673878194",
"319904184860137559463967832220975785196",
"211092430793839798669522631995371230923",
"229666229844497057214943955818285904109",
"49713559122946543134816873828925173003",
"125427430398184970104374416405161618084",
"248860446964533710720645395383705436170",
"5413981642787651925875612285190197621",
"292901806336644293101685234972975779221",
"208949780266620210510980719954131712992",
"220595219184900726964652143124685297439",
"225378090670791135917783701436217023890",
"199206155950982490507114066085143268393",
"299285786247887670767258548724734855583",
"231857744986850364164217989899114770508",
"167873798786874754280165457986858668900",
"108570963600982421934395952207959329165",
"330573393277582772161231143353221318081",
"81653784092368470659098443285078445832",
"63362464542917221990591584691817513290",
"161634798851045177075590472814651561578",
"44970073759113680945856892535284874142",
"152414364967322888259678959767422442282",
"217291216842021165293320734864485185240",
"119849100592330408858328198024467594203",
"210462687936585908283257705763917044884",
"5703347215361416909572434197090900157",
"203525021730686764369441585468507422021",
"143057379066770821180220285747908171619",
"98400175489368484360252060519761504378",
"225960093921543509068935515336208461432",
"187816131237491918039821039828151923341",
"247479362441567544492183951358566694421",
"192744601304242186393669274133433396330",
"289985522894099835913042846896122498313",
"234671953745781370534916124225428254722",
"294227389329561913473934502212811801209",
"338709228123932273787666316307204881232",
"48238602722014083329508749659303937652",
"198726309785576771506647853688993605115",
"222646318618811181039307762508031132094",
"168980627275409184588117016968311124959",
"147420033782537315513636428266078319567",
"333942435495516353351642494136184523958",
"264357873673190214465093343937655044268",
"97791091940643493289537297447019897539",
"242481092812887490525672622164545078997",
"294624464492232924539254773488731499864",
"120138973316454276862253334903108553941",
"317958355019406931246529234481162723388",
"278460699867587568311169356871989153044",
"252117302439953127438195575120238503368",
"459181183833020082379080230180914740",
"153295385142415980162994486826864834945",
"129848061053861932280703456730082530632",
"269131194038877460442507336629927721486",
"23304501576716483991710631768077288251",
"284448522337645183535421152895534707059",
"172270108755823115002382921196152283103",
"138033038281520206811292917948862772139",
"70189949436765229131349102711651084037",
"122955963386717971389016493229470852413",
"263719088117657741694893370528425080301",
"240854735194448697911668532120962534992",
"327467437470546665655462251590938486492",
"74742817607924938383471577672824522928",
"8878724121716213913379945125050936950",
"307640335027800154585849706905076649255",
"53970322087320858165616154177622917440",
"307511422285356667256923995460736736693",
"81400502079721183389097563667559766294",
"296866938541959374565972404935892747690",
"291643206527361066300532648599753855900",
"231403375988989713292989907846983209482",
"179753822049532774926306426995292885655",
"100275818641629518855384437726604844286",
"271632227171045609848350410177950031209",
"17212366359210910799006897376467472063",
"199795561475552305090979746425601241244",
"248807373363654696515483716037365985277",
"273504240806799927871830869408788739132",
"198267373956046252586815549219475626478",
"147456649504443055051554728422353979269",
"67805126067202056499454439094497785911",
"19610355184124251694261222556579979520",
"211043930664007293416204276754153603837",
"107859307344272373760216324217018572851",
"330654728024831037834589208296141371706",
"220657652674624673992056624202008611821",
"289974224447860472770779732956975370212",
"76026136918848368236768876313896689660",
"182836574019101566875337977521503944181",
"139843395392747253736210180203856875249"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-74852313",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51530165114433160403394260222310942467",
"length": 82
},
"id": "CVE-2026-42772-74f0949f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "88184073817359544520676592770664754545",
"length": 283
},
"id": "CVE-2026-42772-77b97089",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_lock_head"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267099777568336743633569016353309047833",
"length": 1139
},
"id": "CVE-2026-42772-792ea147",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_move_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44294536271167779957387684311281709706",
"length": 734
},
"id": "CVE-2026-42772-7baa4325",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_peek"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244909800755828364743604886146464629238",
"length": 3339
},
"id": "CVE-2026-42772-7c94d998",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_simple"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26941170518650191032116771372484578691",
"length": 191
},
"id": "CVE-2026-42772-7ca926f7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312539712076109343417921272776462414397",
"length": 163
},
"id": "CVE-2026-42772-7f9af262",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_destroy"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10368261610138568402867007375629776429",
"length": 66
},
"id": "CVE-2026-42772-816eb58e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_is_head_locked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "253321049840666795287705343906885669926",
"length": 174
},
"id": "CVE-2026-42772-82d78556",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "write_at_ring_buf_cb"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44294536271167779957387684311281709706",
"length": 734
},
"id": "CVE-2026-42772-8661d09e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_peek"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "55522901989670953180270144733258124152",
"length": 297
},
"id": "CVE-2026-42772-87cf9756",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26941170518650191032116771372484578691",
"length": 191
},
"id": "CVE-2026-42772-8a425605",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_free"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149277620116763594184016471133333909935",
"135138906398501142315395202377649750725",
"177806783948542615463730364570848041960",
"193939670127551415855466748785685983336",
"128008086679263998882818631622525195996",
"62292985423794325731291578761257742232",
"118807928303972316311153125423834778669",
"157305375942254888975272818804339083525"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-8af6f2da",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_channel.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "322138739811019629075225801210567361960",
"length": 834
},
"id": "CVE-2026-42772-8e0bb1ef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_get_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212923793318570138698031989841465154078",
"length": 338
},
"id": "CVE-2026-42772-8f4885c1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "append_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302381606908832949459035827693412071641",
"length": 580
},
"id": "CVE-2026-42772-9563f9bd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_release_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25112157648864915220267900697270222453",
"length": 80
},
"id": "CVE-2026-42772-9601d22a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_set_cleanse"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "13825398057668702046883523793934397493",
"length": 391
},
"id": "CVE-2026-42772-97d6de32",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_queue_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "55522901989670953180270144733258124152",
"length": 297
},
"id": "CVE-2026-42772-982aad24",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302381606908832949459035827693412071641",
"length": 580
},
"id": "CVE-2026-42772-9a176a1c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_release_record"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"219088758207279360465464888903606683650",
"116376747991036995909624509498810891651",
"81072655478016841923780309463447521691",
"3791292666834113610056955047681827076",
"179711918729133432799623693273309285286",
"320012250884146612671137240495702580845",
"276355068374831338066911802102356037898",
"229191807132692901553336060033332678300",
"298110122536047293553873602728046220640",
"68446419820288047713484697530195201323",
"171422480279223338357472966354816538842",
"312321492965499404365598855271843531559",
"323728823464713661261707101100111539787",
"75737399536901864105057781540203625330",
"251147473206350666375021370180900144912",
"310629257677570173920517563680372183750",
"167898902698833210596374343765608691449",
"230400327183360371472659610340825952387",
"283093954115580308770555876682548999806",
"197311866571106643922841026664309723191",
"267464522610391505461921043080150448344",
"244632658966386308388475814367648308572",
"45556488121138963934220619669935950557",
"93492139665658478780067802079190951340",
"28384286662551403003956561752550344103",
"245597145759999697480973879212727930917",
"139556462577735360869016144394330572544",
"310387087745835787508209246957172236050",
"271298114825256931569512788384705523062",
"179194564108871655704702698406076162005",
"153562869532853394232281988275524779254",
"10205319571856943185262924763776633892",
"319889042674264695029774917377287586913",
"237004311980205896483869044738948996432",
"217325368392753923817954656669340631226",
"200037104842219501598231777416655200114",
"102916721821756277762098854053523505247",
"24590880306226349429240626684916883960",
"34479091979543750697156400454647208879",
"218560498904075883593423685886012083199"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-9b924332",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "test/quic_stream_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "56484980933439547770400199841039057838",
"length": 187
},
"id": "CVE-2026-42772-9ce6b877",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_resize_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105960036292580160630930316175941048180",
"length": 2930
},
"id": "CVE-2026-42772-a0634c15",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_random"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"219088758207279360465464888903606683650",
"116376747991036995909624509498810891651",
"81072655478016841923780309463447521691",
"3791292666834113610056955047681827076",
"179711918729133432799623693273309285286",
"320012250884146612671137240495702580845",
"276355068374831338066911802102356037898",
"229191807132692901553336060033332678300",
"298110122536047293553873602728046220640",
"68446419820288047713484697530195201323",
"171422480279223338357472966354816538842",
"312321492965499404365598855271843531559",
"323728823464713661261707101100111539787",
"75737399536901864105057781540203625330",
"251147473206350666375021370180900144912",
"310629257677570173920517563680372183750",
"167898902698833210596374343765608691449",
"230400327183360371472659610340825952387",
"283093954115580308770555876682548999806",
"197311866571106643922841026664309723191",
"267464522610391505461921043080150448344",
"244632658966386308388475814367648308572",
"45556488121138963934220619669935950557",
"93492139665658478780067802079190951340",
"28384286662551403003956561752550344103",
"245597145759999697480973879212727930917",
"139556462577735360869016144394330572544",
"310387087745835787508209246957172236050",
"271298114825256931569512788384705523062",
"179194564108871655704702698406076162005",
"153562869532853394232281988275524779254",
"10205319571856943185262924763776633892",
"319889042674264695029774917377287586913",
"237004311980205896483869044738948996432",
"217325368392753923817954656669340631226",
"200037104842219501598231777416655200114",
"102916721821756277762098854053523505247",
"24590880306226349429240626684916883960",
"34479091979543750697156400454647208879",
"218560498904075883593423685886012083199"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-a35c301f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "test/quic_stream_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25112157648864915220267900697270222453",
"length": 80
},
"id": "CVE-2026-42772-a90cf736",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_set_cleanse"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10368261610138568402867007375629776429",
"length": 66
},
"id": "CVE-2026-42772-a9f66e95",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_is_head_locked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244909800755828364743604886146464629238",
"length": 3339
},
"id": "CVE-2026-42772-aaaad387",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_simple"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"122232164220730160483876675223252905796",
"24867354923865899556808014148627534341",
"104090172763448324812671966987632762635",
"293952632211513235730263842456915555042"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-aad48794",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "test/quic_txp_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "332068279764113428399576326624088014448",
"length": 7144
},
"id": "CVE-2026-42772-ac115a8b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "test/quic_txp_test.c",
"function": "run_script"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43408322147033308306663297568300725956",
"length": 1158
},
"id": "CVE-2026-42772-ad09e6a7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "read_internal"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51530165114433160403394260222310942467",
"length": 82
},
"id": "CVE-2026-42772-ad9c5cdf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "313228239510092733941994391880994089446",
"length": 5595
},
"id": "CVE-2026-42772-add1352b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244909800755828364743604886146464629238",
"length": 3339
},
"id": "CVE-2026-42772-b0520ea9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_simple"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35710244521291487932048844744724237811",
"length": 1829
},
"id": "CVE-2026-42772-b5602c7b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_insert"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"239821403704583413895967871362120457115",
"76676457631854887029342579666520126630",
"93515251276268132178928519554380228263",
"261093784909579122015396294332318071453",
"246982484821275462943405971826656360954",
"282192551015191873976908178946251796747",
"207280947455162943464184680813117087757",
"211791582211965340534548828595483541223",
"223681139693871783960433010941687652681",
"50488146041935914240995733852881908279",
"335739051656278243327413380483124600405",
"60913723265964344764759755090605907509",
"86392031149929093284849906980765344679",
"264499926750553804313042423468732087693",
"22250743749862459833798573143194867718",
"246647941512292450200794973290425938037",
"261470122523197653988286118475951339486",
"64443631463146432999125207467072930968",
"75542523443999855003389486432701879198",
"120496985442151664039220698293591791486",
"168977980237257346848816565310912536892",
"328640769819922400499373118980069867472",
"315349319289311930473230167343916656275",
"101433768633029119644812177508864216729",
"259126696994610745788070284703892762768",
"68016279372333490959492913188742207023",
"274087150861900926557839371348474125191",
"241044521901011261032024130700929032335",
"17851760586108832879988143141877864396",
"332171579804315898207553387589860257313",
"284465173051568156358107862723076113621",
"85126674497074858855741055108126718051",
"142647599273187872585010554447280631522"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-b930ff74",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "include/internal/quic_sf_list.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10368261610138568402867007375629776429",
"length": 66
},
"id": "CVE-2026-42772-bb872533",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_is_head_locked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "88184073817359544520676592770664754545",
"length": 283
},
"id": "CVE-2026-42772-c00b6552",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_lock_head"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212923793318570138698031989841465154078",
"length": 338
},
"id": "CVE-2026-42772-c2673aa3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "append_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329214909560980011714403049806713936372",
"length": 165
},
"id": "CVE-2026-42772-c2aeecd8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_move_to_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "322138739811019629075225801210567361960",
"length": 834
},
"id": "CVE-2026-42772-c4a75545",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_get_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "56484980933439547770400199841039057838",
"length": 187
},
"id": "CVE-2026-42772-c53a72e4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_resize_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258837977996044416827128866060614669807",
"length": 381
},
"id": "CVE-2026-42772-c5e6a354",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_available"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"219088758207279360465464888903606683650",
"116376747991036995909624509498810891651",
"81072655478016841923780309463447521691",
"3791292666834113610056955047681827076",
"179711918729133432799623693273309285286",
"320012250884146612671137240495702580845",
"276355068374831338066911802102356037898",
"229191807132692901553336060033332678300",
"298110122536047293553873602728046220640",
"68446419820288047713484697530195201323",
"171422480279223338357472966354816538842",
"312321492965499404365598855271843531559",
"323728823464713661261707101100111539787",
"75737399536901864105057781540203625330",
"251147473206350666375021370180900144912",
"310629257677570173920517563680372183750",
"167898902698833210596374343765608691449",
"230400327183360371472659610340825952387",
"283093954115580308770555876682548999806",
"197311866571106643922841026664309723191",
"267464522610391505461921043080150448344",
"244632658966386308388475814367648308572",
"45556488121138963934220619669935950557",
"93492139665658478780067802079190951340",
"28384286662551403003956561752550344103",
"245597145759999697480973879212727930917",
"139556462577735360869016144394330572544",
"310387087745835787508209246957172236050",
"271298114825256931569512788384705523062",
"179194564108871655704702698406076162005",
"153562869532853394232281988275524779254",
"10205319571856943185262924763776633892",
"319889042674264695029774917377287586913",
"237004311980205896483869044738948996432",
"217325368392753923817954656669340631226",
"200037104842219501598231777416655200114",
"102916721821756277762098854053523505247",
"24590880306226349429240626684916883960",
"34479091979543750697156400454647208879",
"218560498904075883593423685886012083199"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-c73a8996",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "test/quic_stream_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258837977996044416827128866060614669807",
"length": 381
},
"id": "CVE-2026-42772-c76f99e2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_available"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25112157648864915220267900697270222453",
"length": 80
},
"id": "CVE-2026-42772-cb00b8fb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_set_cleanse"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329214909560980011714403049806713936372",
"length": 165
},
"id": "CVE-2026-42772-cf716f55",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_move_to_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "216210175721049241972872924581066586448",
"length": 269
},
"id": "CVE-2026-42772-cf7618e5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312539712076109343417921272776462414397",
"length": 163
},
"id": "CVE-2026-42772-d1da37ab",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_destroy"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "253321049840666795287705343906885669926",
"length": 174
},
"id": "CVE-2026-42772-d2992d67",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "write_at_ring_buf_cb"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267099777568336743633569016353309047833",
"length": 1139
},
"id": "CVE-2026-42772-d4b60007",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_move_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "13825398057668702046883523793934397493",
"length": 391
},
"id": "CVE-2026-42772-d4d67d35",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_queue_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "322138739811019629075225801210567361960",
"length": 834
},
"id": "CVE-2026-42772-d5940d7d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_get_record"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329214909560980011714403049806713936372",
"length": 165
},
"id": "CVE-2026-42772-d81ab739",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_move_to_rbuf"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"122232164220730160483876675223252905796",
"24867354923865899556808014148627534341",
"104090172763448324812671966987632762635",
"293952632211513235730263842456915555042"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-d876452f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "test/quic_txp_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "88184073817359544520676592770664754545",
"length": 283
},
"id": "CVE-2026-42772-d91cf89c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_lock_head"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127390003479003223148055588688926617348",
"length": 347
},
"id": "CVE-2026-42772-d9ede4a8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "332068279764113428399576326624088014448",
"length": 7144
},
"id": "CVE-2026-42772-e01d6b33",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "test/quic_txp_test.c",
"function": "run_script"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105960036292580160630930316175941048180",
"length": 2930
},
"id": "CVE-2026-42772-e0229ab0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "test/quic_stream_test.c",
"function": "test_rstream_random"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"122232164220730160483876675223252905796",
"24867354923865899556808014148627534341",
"104090172763448324812671966987632762635",
"293952632211513235730263842456915555042"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-e02ce8b1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "test/quic_txp_test.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "56484980933439547770400199841039057838",
"length": 187
},
"id": "CVE-2026-42772-e0d4a3c5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_resize_rbuf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "216210175721049241972872924581066586448",
"length": 269
},
"id": "CVE-2026-42772-e0f7e0ef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_free"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1847036928621264111819535755367011710",
"202465124043271441414526682883281670366",
"182848675149595056852372206817224891544",
"71635702378896615314571606895610336244",
"121616954175203626891069966216962447476",
"331025186557538759127229904612525748145",
"45772805910984307907369612672663556974",
"253728294654577913875760746050384113218",
"87047972775929942359636136289558434887",
"63175782093500497565006963949625766383",
"117321889790374484192822993060178557591",
"203618876613136188484341758265168937189",
"258637308207232891898196323250761235980",
"226228245847266913287811777032432902242",
"126769011167610449842607682682337297421",
"219857528483492038215601885030414821097",
"178605098049547155051605985715370488498",
"164964291762211030433856007111612869929",
"23664397047923582904760365150344979500",
"17926128751585991073425241484481125312",
"257830984400422081828062519957492708837",
"195332232508560553042909875874321164837",
"76687205605206399365076519054590320467",
"248901151458016663082314913861142495540",
"189850483604877645377994187056278348257",
"284338412964093874491012911174063537989",
"130701416510907658171651412651538505133",
"75035573464015257265505961603787921",
"73158793028760182265994237520948023095",
"21408917524930410890172326949320606125",
"139956771243854482300568782920338676756",
"176546071226445241465164143505801404581",
"160374146959524104858664107026168530604",
"252238313348058217691968286124057627947",
"335682719749685880847837684725401226759",
"8292284223495575401445479178790651686",
"148148620865750514996009698926165702622",
"287523220909963136439783859880919391746",
"53730405921714967536004124916504669864",
"262436809916690686869037530078369764254",
"222271771346225271074880155597996417167",
"20980261399630854751741528715152181751",
"56743926165408084921327735915669923031",
"83484050225960698320267812224170290866",
"84135062075758105563846200899855170258",
"218192819267759696503922460561179877454",
"253721111209089631705427055232787756570",
"325232518276106959223543274155381213706",
"21024039083433963686506258615553953683",
"84847349433615932499016889291256776315",
"180185712342429610720206773301530503684",
"41509118647645747767058563595849341716",
"89077208983763985041216069661235910159",
"293908236025592713901128263348063176345",
"141095570855681059843281593110369435355",
"292640474476672146479192490688673878194",
"319904184860137559463967832220975785196",
"211092430793839798669522631995371230923",
"229666229844497057214943955818285904109",
"49713559122946543134816873828925173003",
"125427430398184970104374416405161618084",
"248860446964533710720645395383705436170",
"5413981642787651925875612285190197621",
"292901806336644293101685234972975779221",
"208949780266620210510980719954131712992",
"220595219184900726964652143124685297439",
"225378090670791135917783701436217023890",
"199206155950982490507114066085143268393",
"299285786247887670767258548724734855583",
"231857744986850364164217989899114770508",
"167873798786874754280165457986858668900",
"108570963600982421934395952207959329165",
"330573393277582772161231143353221318081",
"81653784092368470659098443285078445832",
"63362464542917221990591584691817513290",
"161634798851045177075590472814651561578",
"44970073759113680945856892535284874142",
"152414364967322888259678959767422442282",
"217291216842021165293320734864485185240",
"119849100592330408858328198024467594203",
"210462687936585908283257705763917044884",
"5703347215361416909572434197090900157",
"203525021730686764369441585468507422021",
"143057379066770821180220285747908171619",
"98400175489368484360252060519761504378",
"225960093921543509068935515336208461432",
"187816131237491918039821039828151923341",
"247479362441567544492183951358566694421",
"192744601304242186393669274133433396330",
"289985522894099835913042846896122498313",
"234671953745781370534916124225428254722",
"294227389329561913473934502212811801209",
"338709228123932273787666316307204881232",
"48238602722014083329508749659303937652",
"198726309785576771506647853688993605115",
"222646318618811181039307762508031132094",
"168980627275409184588117016968311124959",
"147420033782537315513636428266078319567",
"333942435495516353351642494136184523958",
"264357873673190214465093343937655044268",
"97791091940643493289537297447019897539",
"242481092812887490525672622164545078997",
"294624464492232924539254773488731499864",
"120138973316454276862253334903108553941",
"317958355019406931246529234481162723388",
"278460699867587568311169356871989153044",
"252117302439953127438195575120238503368",
"459181183833020082379080230180914740",
"153295385142415980162994486826864834945",
"129848061053861932280703456730082530632",
"269131194038877460442507336629927721486",
"23304501576716483991710631768077288251",
"284448522337645183535421152895534707059",
"172270108755823115002382921196152283103",
"138033038281520206811292917948862772139",
"70189949436765229131349102711651084037",
"122955963386717971389016493229470852413",
"263719088117657741694893370528425080301",
"240854735194448697911668532120962534992",
"327467437470546665655462251590938486492",
"74742817607924938383471577672824522928",
"8878724121716213913379945125050936950",
"307640335027800154585849706905076649255",
"53970322087320858165616154177622917440",
"307511422285356667256923995460736736693",
"81400502079721183389097563667559766294",
"296866938541959374565972404935892747690",
"291643206527361066300532648599753855900",
"231403375988989713292989907846983209482",
"179753822049532774926306426995292885655",
"100275818641629518855384437726604844286",
"271632227171045609848350410177950031209",
"17212366359210910799006897376467472063",
"199795561475552305090979746425601241244",
"248807373363654696515483716037365985277",
"273504240806799927871830869408788739132",
"198267373956046252586815549219475626478",
"147456649504443055051554728422353979269",
"67805126067202056499454439094497785911",
"19610355184124251694261222556579979520",
"211043930664007293416204276754153603837",
"107859307344272373760216324217018572851",
"330654728024831037834589208296141371706",
"220657652674624673992056624202008611821",
"289974224447860472770779732956975370212",
"76026136918848368236768876313896689660",
"182836574019101566875337977521503944181",
"139843395392747253736210180203856875249"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-e2326aff",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "13825398057668702046883523793934397493",
"length": 391
},
"id": "CVE-2026-42772-e60d3178",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_queue_data"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"239821403704583413895967871362120457115",
"76676457631854887029342579666520126630",
"93515251276268132178928519554380228263",
"261093784909579122015396294332318071453",
"246982484821275462943405971826656360954",
"282192551015191873976908178946251796747",
"207280947455162943464184680813117087757",
"211791582211965340534548828595483541223",
"223681139693871783960433010941687652681",
"50488146041935914240995733852881908279",
"335739051656278243327413380483124600405",
"60913723265964344764759755090605907509",
"86392031149929093284849906980765344679",
"264499926750553804313042423468732087693",
"22250743749862459833798573143194867718",
"246647941512292450200794973290425938037",
"261470122523197653988286118475951339486",
"64443631463146432999125207467072930968",
"75542523443999855003389486432701879198",
"120496985442151664039220698293591791486",
"168977980237257346848816565310912536892",
"328640769819922400499373118980069867472",
"315349319289311930473230167343916656275",
"101433768633029119644812177508864216729",
"259126696994610745788070284703892762768",
"68016279372333490959492913188742207023",
"274087150861900926557839371348474125191",
"241044521901011261032024130700929032335",
"17851760586108832879988143141877864396",
"332171579804315898207553387589860257313",
"284465173051568156358107862723076113621",
"85126674497074858855741055108126718051",
"142647599273187872585010554447280631522"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-e774d220",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "include/internal/quic_sf_list.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1847036928621264111819535755367011710",
"202465124043271441414526682883281670366",
"182848675149595056852372206817224891544",
"71635702378896615314571606895610336244",
"121616954175203626891069966216962447476",
"331025186557538759127229904612525748145",
"45772805910984307907369612672663556974",
"253728294654577913875760746050384113218",
"87047972775929942359636136289558434887",
"63175782093500497565006963949625766383",
"117321889790374484192822993060178557591",
"203618876613136188484341758265168937189",
"258637308207232891898196323250761235980",
"226228245847266913287811777032432902242",
"126769011167610449842607682682337297421",
"219857528483492038215601885030414821097",
"178605098049547155051605985715370488498",
"164964291762211030433856007111612869929",
"23664397047923582904760365150344979500",
"17926128751585991073425241484481125312",
"257830984400422081828062519957492708837",
"195332232508560553042909875874321164837",
"76687205605206399365076519054590320467",
"248901151458016663082314913861142495540",
"189850483604877645377994187056278348257",
"284338412964093874491012911174063537989",
"130701416510907658171651412651538505133",
"75035573464015257265505961603787921",
"73158793028760182265994237520948023095",
"21408917524930410890172326949320606125",
"139956771243854482300568782920338676756",
"176546071226445241465164143505801404581",
"160374146959524104858664107026168530604",
"252238313348058217691968286124057627947",
"335682719749685880847837684725401226759",
"8292284223495575401445479178790651686",
"148148620865750514996009698926165702622",
"287523220909963136439783859880919391746",
"53730405921714967536004124916504669864",
"262436809916690686869037530078369764254",
"222271771346225271074880155597996417167",
"20980261399630854751741528715152181751",
"56743926165408084921327735915669923031",
"83484050225960698320267812224170290866",
"84135062075758105563846200899855170258",
"218192819267759696503922460561179877454",
"253721111209089631705427055232787756570",
"325232518276106959223543274155381213706",
"21024039083433963686506258615553953683",
"84847349433615932499016889291256776315",
"180185712342429610720206773301530503684",
"41509118647645747767058563595849341716",
"89077208983763985041216069661235910159",
"293908236025592713901128263348063176345",
"141095570855681059843281593110369435355",
"292640474476672146479192490688673878194",
"319904184860137559463967832220975785196",
"211092430793839798669522631995371230923",
"229666229844497057214943955818285904109",
"49713559122946543134816873828925173003",
"125427430398184970104374416405161618084",
"248860446964533710720645395383705436170",
"5413981642787651925875612285190197621",
"292901806336644293101685234972975779221",
"208949780266620210510980719954131712992",
"220595219184900726964652143124685297439",
"225378090670791135917783701436217023890",
"199206155950982490507114066085143268393",
"299285786247887670767258548724734855583",
"231857744986850364164217989899114770508",
"167873798786874754280165457986858668900",
"108570963600982421934395952207959329165",
"330573393277582772161231143353221318081",
"81653784092368470659098443285078445832",
"63362464542917221990591584691817513290",
"161634798851045177075590472814651561578",
"44970073759113680945856892535284874142",
"152414364967322888259678959767422442282",
"217291216842021165293320734864485185240",
"119849100592330408858328198024467594203",
"210462687936585908283257705763917044884",
"5703347215361416909572434197090900157",
"203525021730686764369441585468507422021",
"143057379066770821180220285747908171619",
"98400175489368484360252060519761504378",
"225960093921543509068935515336208461432",
"187816131237491918039821039828151923341",
"247479362441567544492183951358566694421",
"192744601304242186393669274133433396330",
"289985522894099835913042846896122498313",
"234671953745781370534916124225428254722",
"294227389329561913473934502212811801209",
"338709228123932273787666316307204881232",
"48238602722014083329508749659303937652",
"198726309785576771506647853688993605115",
"222646318618811181039307762508031132094",
"168980627275409184588117016968311124959",
"147420033782537315513636428266078319567",
"333942435495516353351642494136184523958",
"264357873673190214465093343937655044268",
"97791091940643493289537297447019897539",
"242481092812887490525672622164545078997",
"294624464492232924539254773488731499864",
"120138973316454276862253334903108553941",
"317958355019406931246529234481162723388",
"278460699867587568311169356871989153044",
"252117302439953127438195575120238503368",
"459181183833020082379080230180914740",
"153295385142415980162994486826864834945",
"129848061053861932280703456730082530632",
"269131194038877460442507336629927721486",
"23304501576716483991710631768077288251",
"284448522337645183535421152895534707059",
"172270108755823115002382921196152283103",
"138033038281520206811292917948862772139",
"70189949436765229131349102711651084037",
"122955963386717971389016493229470852413",
"263719088117657741694893370528425080301",
"240854735194448697911668532120962534992",
"327467437470546665655462251590938486492",
"74742817607924938383471577672824522928",
"8878724121716213913379945125050936950",
"307640335027800154585849706905076649255",
"53970322087320858165616154177622917440",
"307511422285356667256923995460736736693",
"81400502079721183389097563667559766294",
"296866938541959374565972404935892747690",
"291643206527361066300532648599753855900",
"231403375988989713292989907846983209482",
"179753822049532774926306426995292885655",
"100275818641629518855384437726604844286",
"271632227171045609848350410177950031209",
"17212366359210910799006897376467472063",
"199795561475552305090979746425601241244",
"248807373363654696515483716037365985277",
"273504240806799927871830869408788739132",
"198267373956046252586815549219475626478",
"147456649504443055051554728422353979269",
"67805126067202056499454439094497785911",
"19610355184124251694261222556579979520",
"211043930664007293416204276754153603837",
"107859307344272373760216324217018572851",
"330654728024831037834589208296141371706",
"220657652674624673992056624202008611821",
"289974224447860472770779732956975370212",
"76026136918848368236768876313896689660",
"182836574019101566875337977521503944181",
"139843395392747253736210180203856875249"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-e77df2d6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74982952992512837697763897863522399078",
"15702048738703884791018972500621750430",
"30217698469473948620381156528397228644",
"15418341913198226796215743738609056227",
"251096765005090319504889546114149997680",
"88302358428984097386351674214622715282",
"2274527460099654616537659100879562852",
"28718623823028515959628632826284628425",
"154764489937455182967050040849570189931",
"39818892158206915884604993702539825262",
"86953090453655455773853381835623188899",
"54244873952576324837807982912564755675",
"176335429191699146191315492789987832187",
"259675170082018150944166443902461607264",
"299688469428359914052703460960735378645",
"210291232230063534591685563510371207564",
"188835798985544140645237467208445771918",
"134578425584113512067471791360351216757",
"220564256378280189869235656187725665541",
"193652334448711249288348647292637115721",
"322302891649217076454048362925853615061",
"93095489399073747257217122447501560483",
"199287374616985117199183157939555059511",
"38743645476131273231947333803363463783",
"322993986933642993853397002795313364154",
"44938187670605791044264619204138293787",
"336450401302963866029466659503425610779",
"293612648640860443062744349112085705243",
"204127523256118809333414136583048267020",
"172678050849936068267305302836139259615",
"301813512733488056965461724298306380513",
"53101454320083407952061225175309906060",
"251041877666100627443319352429783081688",
"326580687469054357586751037316928824424",
"182293030699339954646837949130814158445",
"120696306434539158853410258643981163887",
"326526621604369766707541232209708662458",
"296169874435605005992616184551214916477",
"85952871538732393255091306026472570957",
"32462257429648480190948414041237365986",
"271547679852182094097248491395607872664",
"325911930538046759544430293960692608065",
"229716967277970641422840382071419857118",
"304264180724459825290074022344776482497",
"139397178314383664334014644875358443926",
"150158455059481782470721430279088103533",
"68808997123544403911381216965266460207",
"318677933618695683849752466604241630829",
"128780724656586098031897267155378454791",
"145764443811219732965463382935906927907",
"117797497819433647434404979436007623046",
"335664023135301896224503717844192248884",
"310303921866258122822298620414494485796",
"59541286750627321930004757901770204584",
"140128288316842067932719548516610946263",
"112546572777950385859325903403522974686",
"80250697301882567512707463927405856388",
"207592187379379532759439694392596985879",
"246943373235751861850845449375568638438",
"114831047080139332432934323222396005777",
"112249358039051029942555566430220290980",
"63140869223008638083630081088135316493",
"93443933810209268896312473253347812986",
"330181464020681772700485241154225232724",
"12068035771325417527203826490401603779",
"316858335656056706927566747629018656260",
"307503639906905683365807557291801421087",
"232519061379694312111035123825554593914",
"4414017253118807214568235473502517976",
"259240487729211622098932099491624775942",
"171391038222135530542701904478475553347",
"268767643577161966407876259432132820761",
"3252694324677151239787193839151141399",
"160773095775561886745568421399400028059",
"143928432549034432491519309981712135689",
"139018470152237091324908525058898755499",
"178851584046652499098897063121874749919",
"228327307683501486632545704281528371929",
"256522890669538612493938411612321337704",
"106720317564141894259003793912597325216",
"134556468008788775688422817823489757337",
"15466118066416028998674512662228169886",
"338248441931815505983006366872839456535",
"28405321222999431966401744364792601711",
"199741757413801582654768916607591652952",
"265280860152471248742819779431711374525",
"123145397054225372180644463910931756173",
"307054047939883917330218862657951401740",
"243188396105832322123649285843458970038",
"72772641957785682600233300736788942681",
"226550161759984691551790138251186288466",
"239337703459583122269659421890422252833",
"337102778577650533181820282344650941863",
"312595429495779087537517041418923332577",
"312874327354973703442507141455498998969",
"137863977020284742337547796292697490192",
"180720957443477280891893485219463732984",
"330066457032318413708184793744483504878",
"239700592761543194299266108490057805988",
"172909037658856170992714550693859885716",
"144301889437000119445947006656446613276",
"221248431158332224268051039178941134810",
"116722399909404171749516468427420878358",
"42585647292926150957059195691437571986",
"241059176636518817396294052547999372531",
"131409213723182011842646755267713590705",
"22455804086932222761536974722298393286",
"150921592284850817702514256878598031838",
"210954383329174138526799308780506019551",
"226652328043815124823241692293154654697",
"269799866923054504123497837675934907490",
"7158629404373098867190199239541665150",
"266850280780283924092638140660620132184",
"170883036669198029976347911290962920613",
"7535545833173790461894049451890477197",
"241296535558428515090495823744193132827",
"12572628083864896725607408929640895039",
"309256638355544634972334119548851321472",
"114923810077326344086862205065842406333",
"339884561625969263018149398850987386968",
"291018636631442687913874023778987468496",
"238584775571908755745328056140317943305",
"191135242630038015667486294387278750556",
"4897488741245746203349309311489657584",
"107187519163216690551899506263947449246",
"197863284818816715303956699469365599079",
"279774897363816218865356902410637429196",
"207053318488155142306215391798166130175",
"212594012398040671707799299258442067548",
"209300279767321030902268441461185957539",
"120088679894527914529237950697148319235",
"73491864813573394822236303865105864887",
"36576091309524540364410121787311274299",
"321474069263271175019953577421806536713",
"294714307001331078283332142619951934281",
"96740416428554827288232396984424725257",
"215318358335473900753966247598906426606",
"229689064938110259326547822313840300223",
"63950322305318066533272089201660207005",
"277772318153601411675350566017043473788",
"292870839890739344254433660965522263256",
"150060481162638277854157602964216631943",
"15258739925529875255033614717670001099",
"170488746979735510910845426877186478226",
"329847705114022725511203662541028318752",
"304241553467205304990275600084706363410",
"304222811352592105158788720767636774210",
"82812394471140042762868889138577508192",
"215725707688038327683320105797722646552",
"302195121224950311346070832975267274710",
"71590190446226853986744289794619157891",
"189445953622532142935500215122293178028",
"132534778989463090186213282853886044509",
"248196491088567862697717198729773428412",
"187933951228454824654899876750571592925",
"286149884297231764049244360081601617411",
"31929230917419371334993247740594094529",
"194771639557540278985678673614613933418",
"173426973193771581121366604962528732849",
"268287984699850420388080335271023586620",
"103762410759443453791557506665828282173",
"322666787091023982528294286685291721857",
"102121325895692814832135560670375583351",
"277910638057787292824982181124932303887",
"121308223306250727907117984201924435079",
"286248731093937548414168915298138195060",
"233000697251743719950894642637966340566",
"25852397973431133322162571419358225569",
"236605743371064517977033621688618278381",
"321078846217946552235845379286057582069",
"312744421835880846662254186450391368083",
"39394817286257661701331915584773642578",
"204812086753759158389519430712119450898",
"239696636926851664944184754041906980907",
"23181543169066764319614012720712985232",
"167279804022487815422627429216037680315",
"202846738127111647059250096659398004075",
"89074736780374400923905476565979109971",
"187474822068771904195636316382048098475",
"296704217385461805622454300248134453907",
"36147087836177612431564580677594260356",
"114431342733261657493147961982738213982",
"31619335960180050910860955592756297079",
"127784072306378918924071605968959891940",
"307918673083981849063974005776876277187",
"14091775278900149276947423096532477428",
"41195021204452320468685642185345485712",
"74467383958604377626236180802887331292",
"109622723569694904280827276058346057992",
"250208027806642411636479462402389689988",
"149974306530630350882994476915805109614",
"271807812691742844443393973386883271379",
"79623409142686166989063257787961067035",
"257778818996373470560122270974450178679",
"106514675030180008857296460161711624501",
"16885211060579656150610020524966802821",
"290183135770766169566698631598435151323",
"170833195905115912244568525492041221278",
"223156625022380373067864553983783198133",
"124449259833492082729400693315502938024",
"183396743928637156444618726850761097638",
"127616664925366548076763128610090026269",
"30244778309677109702390822226273236734",
"105654652000506801185826448751421812149",
"53390993166150096152322120790927897506",
"6177191553342952940082033978166114462",
"138395510756940379574320825946233950396",
"257784493549634311603072295236364182003",
"290395309714773214859784111900383617977",
"155582648464694058382243635621938854323",
"26811927573755595154940631732223613497",
"45884826869121298693042415550273206357",
"42753404299853030889694474465202403505",
"281799180620743057420261890216035815580",
"81954482607419111049196859689141640018",
"143159801882378407362071314048044178319",
"141659870395169733630157802405686858377",
"29305975265914232951978722759001679139",
"120913315643664170586011395469143523075",
"166609691269677817616934899634534774010",
"179210382508354396668377746462428106763",
"277707851977169503824444431826364441605",
"86699242798227825977890915484550976442",
"254676441165477685396121809765316350869",
"305721408783499461140335280661198638301",
"95921240503838308267107736697632392416",
"269810215215748192322632260105332352070",
"114214583309567426879767248477506504728",
"79753913146901665246586427287067329632",
"262357558656561569036812920291289798279",
"166748300649933212859204276448548196596",
"67736482824392804199979352248531795068",
"277703927141267464142196773975057772115",
"160538696447741281716761077466887394355",
"21008022175420935297804498447756558083",
"74832733730310273037987976254577701249",
"41318171004241418959110994022114730037",
"146842236006025779024705225048309641739",
"157616850624501327913961022269222499561",
"182967459727676477038962903115186135485",
"315401333192851121456529104876678261712",
"78747773755033979315387024884736102685",
"203726844122887756660823691235756028727",
"221665520286143046305238010524297577812",
"11646000621658023512656480258462890804"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-e96b2dac",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_sf_list.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "253321049840666795287705343906885669926",
"length": 174
},
"id": "CVE-2026-42772-e9c815e1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "write_at_ring_buf_cb"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "13825398057668702046883523793934397493",
"length": 391
},
"id": "CVE-2026-42772-eb25f49a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_queue_data"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"239821403704583413895967871362120457115",
"76676457631854887029342579666520126630",
"93515251276268132178928519554380228263",
"261093784909579122015396294332318071453",
"246982484821275462943405971826656360954",
"282192551015191873976908178946251796747",
"207280947455162943464184680813117087757",
"211791582211965340534548828595483541223",
"223681139693871783960433010941687652681",
"50488146041935914240995733852881908279",
"335739051656278243327413380483124600405",
"60913723265964344764759755090605907509",
"86392031149929093284849906980765344679",
"264499926750553804313042423468732087693",
"22250743749862459833798573143194867718",
"246647941512292450200794973290425938037",
"261470122523197653988286118475951339486",
"64443631463146432999125207467072930968",
"75542523443999855003389486432701879198",
"120496985442151664039220698293591791486",
"168977980237257346848816565310912536892",
"328640769819922400499373118980069867472",
"315349319289311930473230167343916656275",
"101433768633029119644812177508864216729",
"259126696994610745788070284703892762768",
"68016279372333490959492913188742207023",
"274087150861900926557839371348474125191",
"241044521901011261032024130700929032335",
"17851760586108832879988143141877864396",
"332171579804315898207553387589860257313",
"284465173051568156358107862723076113621",
"85126674497074858855741055108126718051",
"142647599273187872585010554447280631522"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-eb9d5dfb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "include/internal/quic_sf_list.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10368261610138568402867007375629776429",
"length": 66
},
"id": "CVE-2026-42772-ef38d2e3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_is_head_locked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "305218109986914191021907870813775440693",
"length": 1255
},
"id": "CVE-2026-42772-ef717dcf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_channel.c",
"function": "ch_init_new_stream"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"274193825400842225462124594030315148599",
"322714817412923969402987045145288481376",
"321576787613400722634599292063338323801",
"187252652548141966679513484160341652123",
"209695279590137918582993744475413307522",
"121064765340631503432539733560239363776",
"109361813063782744777804979382876125462",
"107455238247424988587496667315973095962",
"75333527572042543942049363917993383474",
"237350151895075963617548733587778970066",
"263914276315074857373741611669600544345",
"2323896793620023012935374184147820790",
"123106796925604915990683442800092496826",
"60688730619562135954720005353398448285",
"278426619377439693542039504038059342967"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-ef8d68cb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "include/internal/quic_stream.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "216210175721049241972872924581066586448",
"length": 269
},
"id": "CVE-2026-42772-f17494d4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "stream_frame_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267099777568336743633569016353309047833",
"length": 1139
},
"id": "CVE-2026-42772-f23afe52",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_move_data"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"274193825400842225462124594030315148599",
"322714817412923969402987045145288481376",
"321576787613400722634599292063338323801",
"187252652548141966679513484160341652123",
"209695279590137918582993744475413307522",
"121064765340631503432539733560239363776",
"109361813063782744777804979382876125462",
"107455238247424988587496667315973095962",
"75333527572042543942049363917993383474",
"237350151895075963617548733587778970066",
"263914276315074857373741611669600544345",
"2323896793620023012935374184147820790",
"123106796925604915990683442800092496826",
"60688730619562135954720005353398448285",
"278426619377439693542039504038059342967"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-f3e795d7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09",
"target": {
"file": "include/internal/quic_stream.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149277620116763594184016471133333909935",
"135138906398501142315395202377649750725",
"177806783948542615463730364570848041960",
"193939670127551415855466748785685983336",
"128008086679263998882818631622525195996",
"62292985423794325731291578761257742232",
"118807928303972316311153125423834778669",
"157305375942254888975272818804339083525"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-f6760b75",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_channel.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277862496891388677959116519210694512994",
"length": 596
},
"id": "CVE-2026-42772-f71f4012",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e",
"target": {
"file": "ssl/quic/quic_sf_list.c",
"function": "ossl_sframe_list_drop_frames"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127390003479003223148055588688926617348",
"length": 347
},
"id": "CVE-2026-42772-f7e56249",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127390003479003223148055588688926617348",
"length": 347
},
"id": "CVE-2026-42772-f84f0d1b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_new"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26941170518650191032116771372484578691",
"length": 191
},
"id": "CVE-2026-42772-f8a2c5d2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_free"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"96522130596506801207493628384073879193",
"322782158800853981750148245316052051484",
"177806783948542615463730364570848041960",
"193939670127551415855466748785685983336",
"128008086679263998882818631622525195996",
"62292985423794325731291578761257742232",
"118807928303972316311153125423834778669",
"157305375942254888975272818804339083525"
],
"threshold": 0.9
},
"id": "CVE-2026-42772-f997da8a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773",
"target": {
"file": "ssl/quic/quic_channel.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258837977996044416827128866060614669807",
"length": 381
},
"id": "CVE-2026-42772-fd6fa401",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "ossl_quic_rstream_available"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "253321049840666795287705343906885669926",
"length": 174
},
"id": "CVE-2026-42772-fdc52df0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a",
"target": {
"file": "ssl/quic/quic_rstream.c",
"function": "write_at_ring_buf_cb"
}
}
]
"2026-10-01T14:12:55Z"