Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-7053

CMS Null dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
openssl

Description

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSSL OpenSSL

  • openssl-1.1.0affected
  • openssl-1.1.0aaffected
  • openssl-1.1.0baffected

References