Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-4428

CRL Distribution Point Scope Check Logic Error in AWS-LC

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMZN

Description

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AWS AWS-LC

Default version status: unaffected

  • 1.24.0 to < 1.71.0affected

AWS AWS-LC-FIPS

Default version status: unaffected

  • 3.0.0 to < 3.3.0affected

References