Buffer Overflow Vulnerability in rust-openssl Product by OpenSSL

CVE-2026-41898

What is CVE-2026-41898?

The rust-openssl library, which provides OpenSSL bindings for Rust, contains a vulnerability where FFI trampolines in functions such as set_psk_client_callback and others forward returned sizes directly to OpenSSL without validation against the corresponding mutable byte slice. This oversight can result in buffer overflows, possibly leading to memory corruption and other unintended behaviors, which have been addressed in version 0.10.78.

References