Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-23 | 1 | General1 |
| 2026-04-24 | 1 | Disclosure1 |
CVE-2026-41677 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length retu… https://www.cve.org/CVERecord?id=CVE-2026-41677
Post summary
The text announces CVE-2026-41677, indicating a length‑validation issue in rust‑openssl *_from_pem_callback APIs, with no evidence of exploitation or patch availability.
🔵 Rust-OpenSSL, Out-Of-Bounds Read, #CVE-2026-41677 (Low Severity) https://dailycve.com/rust-openssl-out-of-bounds-read-cve-2026-41677-low-severity/
Post summary
A tweet merely references CVE-2026-41677, noting an out‑of‑bounds read in Rust‑OpenSSL and a low severity rating, and links to a daily CVE page without additional details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | rust-openssl_project | rust-openssl | - | rust | - |