GitHub

OpenSSL CMS Buffer Overflow Vulnerability

The Windows NuGet packages (librdkafka.redist) currently bundle OpenSSL 3.3.2. This version is affected by CVE-2025-15467, a Critical (CVSS 9.8) stack buffer overflow in OpenSSL's CMS parsing. The fix ...
GitHub

CVE-2025-15467 (HIGH): detected in Lambda Docker Images.

public.ecr.aws/lambda/provided:latest public.ecr.aws/lambda/provided@sha256:b552c8a6a9439ade38fc00160b6827ba73f233865b44c75ca66b7d3069b21bd8 public.ecr.aws/lambda ...
TechRadar

One job where AI stepping up isn't such a problem - AI-assisted cybersecurity team discovers mass of OpenSSL vulnerabilities, praised for 'high quality of the reports and their ...

AISLE AI toolset exposed OpenSSL vulnerabilities stretching back to the earliest HTTPS era Even heavily audited security code can hide serious flaws for decades Crashes and memory corruption remain ...