{"id":"CVE-2026-81720","title":"openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation","summary":"openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity st…","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"vendor":"jahlives","product":"openssl_encrypt","affected":["openssl_encrypt < 1.4.9"],"patched":["openssl_encrypt 1.4.9"],"published":"2026-08-27","updated":"2026-09-03","sourceUpdated":"2026-09-03T15:09:57.017","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81720","references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-783h-8q2f-f762","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-unbounded-argon2","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-27T18:24:04.426141Z"},"ingestedAt":"2026-09-14T14:16:36.819Z","epss":0.00185,"epssPercentile":0.07217,"slug":"CVE-2026-81720","body":"## Overview\n\nopenssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.\n\n## Affected\n\n- `openssl_encrypt < 1.4.9`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `openssl_encrypt 1.4.9`","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}