{"id":"CVE-2026-41898","title":"rust-openssl provides OpenSSL bindings for the Rust programming language","summary":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_sta…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-126","CWE-130"],"vendor":"rust-openssl_project","product":"rust-openssl","affected":["rust-openssl >= 0.9.24, < 0.10.78"],"patched":["rust-openssl 0.10.78"],"published":"2026-04-24","updated":"2026-07-15","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41898","references":[{"url":"https://github.com/rust-openssl/rust-openssl/commit/1d109020d98fff2fb2e45c39a373af3dff99b24c","label":"security-advisories@github.com"},{"url":"https://github.com/rust-openssl/rust-openssl/pull/2607","label":"security-advisories@github.com"},{"url":"https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78","label":"security-advisories@github.com"},{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-hppc-g8h3-xhp3","label":"security-advisories@github.com"}],"tags":["nvd"],"epss":0.0028,"epssPercentile":0.20754,"ingestedAt":"2026-07-16T02:48:54.878Z","slug":"CVE-2026-41898","body":"## Overview\n\nrust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut [u8] that was handed to the closure. This can lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78.\n\n## Affected\n\n- `rust-openssl >= 0.9.24, < 0.10.78`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `rust-openssl 0.10.78`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}