OpenSSL Patches High-Severity Vulnerability Found With AI

▤ Summary

OpenSSL released patches for 18 vulnerabilities, including a high-severity heap use-after-free flaw that could enable remote code execution. The issue affects PKCS#7 verification and can be triggered with a specially crafted PKCS#7 or S/MIME signed message. The update also fixes several moderate and low-severity flaws that could expose encrypted traffic, enable forgery, or cause denial of service. The report highlights that AI-assisted research helped uncover the bugs, but the main takeaway is that users should update OpenSSL quickly to reduce exposure.

▦ Linked Companies