People: |
|
|---|
TWSD-1340 HSOL-4291 / APV OpenSSL Vulnerability CVE-2025-9230
Review Request #1237 — Created Dec. 17, 2025 and submitted
| Information | |
|---|---|
| peteryeh | |
| APV10 | |
| rel_apv_10_7_3, rel_apv_10_7_4, rel_apv_10_7 | |
| TWSD-1340 | |
| Reviewers | |
| kevin.poh, mingji, tanya, weikai | |
CVE-2025-9230: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. This out-of-bounds read may trigger a crash which leads to Denial of Service for an application
Intergrated from OpenSSL 1.1.1 to OpenSSL 3.2
