CVE-2026-7383

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7383
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-7383.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-7383
Downstream
ALPINE (1)
ALSA (2)
AZL (3)
BELL (1)
CGA (30)
DEBIAN (1)
JLSEC (1)
MGASA (1)
MINI (2)
OESA (9)
openSUSE (2)
RHSA (10)
RLSA (2)
ROOT (3)
SUSE (15)
UBUNTU (1)
Related
ALSA (2)
openSUSE (2)
SUSE (15)
Published
2026-06-09T16:03:15Z
Modified
2026-11-11T13:27:27Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
Details

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow.

Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour.

In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation.

X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the input length; no network protocol or certificate-handling path in OpenSSL exercises the overflow. Triggering the bug requires an application that calls ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers a custom string type via ASN1_STRING_TABLE_add(), with attacker-controlled input on the order of half a gigabyte or more. For these reasons this issue was assigned Low severity.

The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Database specific 
{
    "cna_assigner": "openssl",
    "cwe_ids": [
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7383.json"
}
References

Affected packages

Git / github.com/alsyundawy/openssl-1.0.2

Affected ranges

Type
GIT
Repo
https://github.com/alsyundawy/openssl-1.0.2
Events
Introduced
c46078156d49453ba69badc9addb1e2dcd1c71f5
Fixed
c46078156d49453ba69badc9addb1e2dcd1c71f5
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2zq"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://github.com/kzalewski/openssl-1.1.1
Events
Introduced
ddb327ab19b29c64c1752cef26c460ca0b7064ec
Fixed
ddb327ab19b29c64c1752cef26c460ca0b7064ec
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1zh"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
e818b74be2170fbe957a07b0da4401c2b694b3b8
Fixed
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
e04bd3433fd84e1861bf258ea37928d9845e6a86
Fixed
e04bd3433fd84e1861bf258ea37928d9845e6a86
Introduced
89cd17a031e022211684eb7eb41190cf1910f9fa
Fixed
51ea949dc1436e865935b47874b21a3bb31a102e
Introduced
98acb6b02839c609ef5b837794e08d906d965335
Fixed
c5ea1cc227fd60afae8ac4b9438690bbe4888f79
Introduced
636dfadc70ce26f2473870570bfd9ec352806b1d
Fixed
8cf17aaeb4599f8af87fefd810b5b5fee90fe69e
Introduced
7b371d80d959ec9ab4139d09d78e83c090de9779
Fixed
aae016bfd52fcad2bc9657c2c782cfdf73b1ed5f
Introduced
11b7b6ea3b65a584e1d31408ed1bdb139465cffd
Fixed
4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6
Fixed
80c15faaf78042bbb8654a0e234c50c381732f74
Fixed
bd17511070fb39a67bfa19682affb765e706a974
Fixed
c332adaced43bcbb85f97410597e951c11ec3083
Fixed
d32350ae8ef7426718f5aa9e383d4b51398ee255
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2zq"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1zh"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.0.21"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.4.0"
                },
                {
                    "fixed": "3.4.6"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.5.0"
                },
                {
                    "fixed": "3.5.7"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.6.0"
                },
                {
                    "fixed": "3.6.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "4.0.0-NA"
                },
                {
                    "last_affected": "4.0.0-NA"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "range": [
                {
                    "fixed": "4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "80c15faaf78042bbb8654a0e234c50c381732f74"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "bd17511070fb39a67bfa19682affb765e706a974"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "c332adaced43bcbb85f97410597e951c11ec3083"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "d32350ae8ef7426718f5aa9e383d4b51398ee255"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

3.*
3.0-POST-CLANG-FORMAT-WEBKIT
3.0-PRE-CLANG-FORMAT-WEBKIT
3.4-POST-CLANG-FORMAT-WEBKIT
3.4-PRE-CLANG-FORMAT-WEBKIT
3.5-POST-CLANG-FORMAT-WEBKIT
3.5-PRE-CLANG-FORMAT-WEBKIT
3.6-POST-CLANG-FORMAT-WEBKIT
3.6-PRE-CLANG-FORMAT-WEBKIT
4.*
4.0.0-NA
openssl-3.*
openssl-3.0.0
openssl-3.0.1
openssl-3.0.10
openssl-3.0.11
openssl-3.0.12
openssl-3.0.13
openssl-3.0.14
openssl-3.0.15
openssl-3.0.16
openssl-3.0.17
openssl-3.0.18
openssl-3.0.19
openssl-3.0.2
openssl-3.0.20
openssl-3.0.3
openssl-3.0.4
openssl-3.0.5
openssl-3.0.6
openssl-3.0.7
openssl-3.0.8
openssl-3.0.9
openssl-3.4.0
openssl-3.4.1
openssl-3.4.2
openssl-3.4.3
openssl-3.4.4
openssl-3.4.5
openssl-3.5.0
openssl-3.5.1
openssl-3.5.2
openssl-3.5.3
openssl-3.5.4
openssl-3.5.5
openssl-3.5.6
openssl-3.6.0
openssl-3.6.1
openssl-3.6.2
openssl-4.*
openssl-4.0.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-7383.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "145081246022159018632346591780852072638",
            "length": 3301
        },
        "id": "CVE-2026-7383-0115da44",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "314277570596906803737453056118000261489",
                "134443953973411113628429047361571354695",
                "144241986910067820723321631094658024558",
                "219027348492242387101505984291253252762",
                "197249709654825572065845136116068698100",
                "335442194952519091195796659076425621527",
                "94024945373243508884955678864647600249",
                "58865074517344503016033744066393422789",
                "171075818861470609519508474684508188088",
                "183308020435695821222991028080353540824",
                "112766856209011567470513760761740501796"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-03cd20c7",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151496904140441974460168482169374190024",
                "252388763391472546762550272601898462670",
                "322392321298523662111637318544365606017",
                "92792830564595161366593755445407076135",
                "125370360892352031658984319622272957499",
                "135472893131710710891792272165369874557",
                "144388576385066123595834036136006620631",
                "251569583518298411383983956510462999062",
                "190752638376984200658169048788492801771",
                "100442701798321830557371459503827921141",
                "157868922838337151802955969179465392317",
                "247133924118207300622477622521703740882"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-10c2ef8d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/pkcs7/pk7_smime.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "157368430457296408057518218641344868108",
            "length": 3297
        },
        "id": "CVE-2026-7383-1be3bd59",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "70418561901620867514045039520920039213",
            "length": 148
        },
        "id": "CVE-2026-7383-315e1fbb",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "326715636192485159031379249291784863467",
            "length": 195
        },
        "id": "CVE-2026-7383-35f12443",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "314277570596906803737453056118000261489",
                "134443953973411113628429047361571354695",
                "144241986910067820723321631094658024558",
                "219027348492242387101505984291253252762",
                "197249709654825572065845136116068698100",
                "335442194952519091195796659076425621527",
                "94024945373243508884955678864647600249",
                "58865074517344503016033744066393422789",
                "171075818861470609519508474684508188088",
                "183308020435695821222991028080353540824",
                "112766856209011567470513760761740501796"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-53da0590",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "326715636192485159031379249291784863467",
            "length": 195
        },
        "id": "CVE-2026-7383-5a2e414f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "314277570596906803737453056118000261489",
                "134443953973411113628429047361571354695",
                "144241986910067820723321631094658024558",
                "219027348492242387101505984291253252762",
                "197249709654825572065845136116068698100",
                "335442194952519091195796659076425621527",
                "94024945373243508884955678864647600249",
                "58865074517344503016033744066393422789",
                "171075818861470609519508474684508188088",
                "183308020435695821222991028080353540824",
                "112766856209011567470513760761740501796"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-6d93e3cf",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "186349096673253037366471905327905215678",
            "length": 3172
        },
        "id": "CVE-2026-7383-6ea28808",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "326715636192485159031379249291784863467",
            "length": 195
        },
        "id": "CVE-2026-7383-6ecfcbdc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "314277570596906803737453056118000261489",
                "134443953973411113628429047361571354695",
                "144241986910067820723321631094658024558",
                "219027348492242387101505984291253252762",
                "197249709654825572065845136116068698100",
                "335442194952519091195796659076425621527",
                "94024945373243508884955678864647600249",
                "58865074517344503016033744066393422789",
                "171075818861470609519508474684508188088",
                "183308020435695821222991028080353540824",
                "112766856209011567470513760761740501796"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-7397b06f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "65331361705884786675178309567558276074",
            "length": 3109
        },
        "id": "CVE-2026-7383-810515e4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "65331361705884786675178309567558276074",
            "length": 3109
        },
        "id": "CVE-2026-7383-81b05481",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "131154213046974496778457434048691074837",
                "11412147066710286517722597447846471117",
                "264770296592556677305107142032766937388",
                "276397443140848844849079658380453872857",
                "195870554892312134442829321964179019399"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-87e36a00",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "126341431044776940549287222658722596257",
                "130570927788432269899785168744788951172",
                "194169660864360803525450492876473860091",
                "110467782499934282756168500046914951485",
                "263946134258438649256241779625323641089",
                "232531144570205203842568959033909256821",
                "50105547378036962616739399907795763233",
                "35026789599821935911816818772042439275",
                "114710208109255960726965919362105298762",
                "125554540231637930487019176647117002503",
                "332182547294553747961268671162250805775",
                "276033856309860817184326883455361222142",
                "318268129131630080093563577138856184340",
                "128526451235089518533697095563624199685",
                "75522999902161732913968142567093758009",
                "233242365504435285051066046524808432015",
                "197089990496411212407345093272572794903",
                "203627204430850126635677767987115907052",
                "110527555710504927393608627867030602220",
                "129739062881190220811156277727848860285",
                "64544717289057079449815286406570439951",
                "201167284819377777248970251144566099169",
                "222516930768176972010755807924686646230",
                "90961471150301180096894104068604511683",
                "128676851434441285018275177161089865561",
                "129724505883296824298208229090221093179",
                "225269234833384762270352983556638638592",
                "90371650052899301631217696225591147992",
                "246784737627998664119002956221509877842",
                "315371643750711437594895449353374659288",
                "286011929765548229255520019142347591441",
                "220624038106194157196845376518684753434",
                "174882410006964856548150664239804105254",
                "116231510630487651899483668166785513275"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-89e18e76",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/tasn_dec.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "219260262152978755644652810379289549161",
                "238161164963855964634408949729400551790",
                "305007661457817428636275014467276783572",
                "224942011457082636465204480559032896603",
                "161399292792765951653776025419102349086",
                "249748745323502641665219507560747603718",
                "133814635171188589537358224623499256384",
                "166636678108051380708454788668826388282",
                "148812255457104429740188330155555022957",
                "67995203963239490129688609208357985916",
                "46589837028236721023105012731504719567",
                "61425611895307496760454057009746874404"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-8be4f956",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "60884720753669845608764646390078165978",
            "length": 2404
        },
        "id": "CVE-2026-7383-8dac97cc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c",
            "function": "cms_RecipientInfo_pwri_crypt"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "326715636192485159031379249291784863467",
            "length": 195
        },
        "id": "CVE-2026-7383-a18e4192",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "319646123228225632035521226865494527950",
                "52841444872899117514496250284924185664",
                "33853134948390324832871761212087746225",
                "81188860042095766577152905858367341175",
                "302749459819436303573414214711383738500",
                "106372169618065324582769687411773396323",
                "255586470514418239073904203556570502151",
                "316909758438434070933019317604952931093",
                "227036639418218030553513135503985645880",
                "19797040175335443903820697047342526981",
                "3213252085324805485799329367541299827",
                "167277605188112932709311947349617776953",
                "33676618202441094170922943458357128290"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-c30f17c3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "28170854778703993674264004058177114599",
                "73132526844288570625317440636111911761",
                "177405411499435185068645597737938634778",
                "224809958623850711330610094965797758930",
                "295554444428855106393106961197201359586"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-c377fa22",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "314277570596906803737453056118000261489",
                "134443953973411113628429047361571354695",
                "144241986910067820723321631094658024558",
                "219027348492242387101505984291253252762",
                "197249709654825572065845136116068698100",
                "335442194952519091195796659076425621527",
                "94024945373243508884955678864647600249",
                "58865074517344503016033744066393422789",
                "171075818861470609519508474684508188088",
                "183308020435695821222991028080353540824",
                "112766856209011567470513760761740501796"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-d050859d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "219999985288845958916653358585559913606",
            "length": 2843
        },
        "id": "CVE-2026-7383-db231d4a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/tasn_dec.c",
            "function": "asn1_ex_c2i"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "130089047505679726786813950750828918851",
            "length": 1031
        },
        "id": "CVE-2026-7383-df118fd8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c",
            "function": "kek_unwrap_key"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251633914150035957322733061977107206211",
                "338514574181828579838011565939158652696",
                "76638288692106140328510055542557597351",
                "142922657400765574308962710386922248045",
                "71649992455794854055653842592139575350",
                "65527166711110472566013424527579064967",
                "253196866009476977787139000804413898733",
                "172177136897997206866313011107384691461"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-7383-e051451f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
        "target": {
            "file": "crypto/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "157368430457296408057518218641344868108",
            "length": 3297
        },
        "id": "CVE-2026-7383-e999ea89",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "326715636192485159031379249291784863467",
            "length": 195
        },
        "id": "CVE-2026-7383-fb21566a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    }
]
vanir_signatures_modified 
"2026-11-11T13:27:27Z"