VulnSocial

CVE-2026-81693Patch(jahlives / openssl_encrypt)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch jahlives openssl_encrypt systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions.

jahlives CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-789

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openssl_encrypt

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
jahlives
Products
openssl_encrypt

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-31: 1Patch / Workaround · 2026-08-31: 1Technical Details · 2026-08-31: 108-31
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-81693 (CVSS 7.5) openssl_encrypt <1.4.9 vulnerable to DoS via crafted QR payloads with unbounded memory allocation. ✅ Patch to v1.4.9+ #CVE #Vulnerability #PatchNow https://t.co/SbVUPGiDRX

    Post summary

    The tweet announces a CVE‑2026‑81693 DoS vulnerability in openssl_encrypt <1.4.9 caused by unbounded memory allocation from crafted QR payloads and highlights that the issue is mitigated by patching to v1.4.9 or later.

    0000021
    121 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjahlivesopenssl_encrypt-python-

Explore more

Back to dashboardjahlives CVEsopenssl_encrypt vulnerabilities