{"id":"CVE-2025-69419","summary":"Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion","details":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.","modified":"2026-11-11T13:23:11.100546156Z","published":"2026-01-27T16:01:24.822Z","related":["ALSA-2026:1472","ALSA-2026:1473","ALSA-2026:19187","ALSA-2026:3042","ALSA-2026:4472","SUSE-SU-2026:0309-1","SUSE-SU-2026:0310-1","SUSE-SU-2026:0311-1","SUSE-SU-2026:0312-1","SUSE-SU-2026:0331-1","SUSE-SU-2026:0343-1","SUSE-SU-2026:0346-1","SUSE-SU-2026:0358-1","SUSE-SU-2026:0359-1","SUSE-SU-2026:0360-1","SUSE-SU-2026:20211-1","SUSE-SU-2026:20223-1","SUSE-SU-2026:20349-1","SUSE-SU-2026:20373-1","openSUSE-SU-2026:10237-1","openSUSE-SU-2026:20152-1"],"database_specific":{"cna_assigner":"openssl","cwe_ids":["CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69419.json"},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69419.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419"},{"type":"ADVISORY","url":"https://openssl-library.org/news/secadv/20260127.txt"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kzalewski/openssl-1.1.1","events":[{"introduced":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"fixed":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1"},{"fixed":"1.1.1ze"}],"source":"CPE_RANGE"}]}},{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"fixed":"a22063cd69a077cc68bb4c10e9f351f75899b194"},{"introduced":"4cb31128b5790819dfeea2739fbde265f71a10a2"},{"fixed":"4601ff25acd6c2fe58a8bfe241e6c470e27b8074"},{"introduced":"98acb6b02839c609ef5b837794e08d906d965335"},{"fixed":"565bdcc41bbf89fcbaf962636469332689f0c9fd"},{"introduced":"636dfadc70ce26f2473870570bfd9ec352806b1d"},{"fixed":"67b5686b4419b4cb8caa502711c41815f5279751"},{"introduced":"7b371d80d959ec9ab4139d09d78e83c090de9779"},{"fixed":"c9a9e5b10105ad850b6e4d1122c645c67767c341"},{"fixed":"41be0f216404f14457bbf3b9cc488dba60b49296"},{"fixed":"7e9cac9832e4705b91987c2474ed06a37a93cecb"},{"fixed":"a26a90d38edec3748566129d824e664b54bee2e2"},{"fixed":"cda12de3bc0e333ea8d2c6fd15001dbdaf280015"},{"fixed":"ff628933755075446bca8307e8417c14d164b535"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1"},{"fixed":"1.1.1ze"}]},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.0.0"},{"fixed":"3.0.19"}],"source":"CPE_RANGE"},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.3.0"},{"fixed":"3.3.6"}],"source":"CPE_RANGE"},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0"},{"fixed":"3.4.4"}],"source":"CPE_RANGE"},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0"},{"fixed":"3.5.5"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.6.0"},{"fixed":"3.6.1"}]},{"source":"REFERENCES_COMMIT","range":[{"fixed":"41be0f216404f14457bbf3b9cc488dba60b49296"}]},{"range":[{"fixed":"7e9cac9832e4705b91987c2474ed06a37a93cecb"}],"source":"REFERENCES_COMMIT"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"a26a90d38edec3748566129d824e664b54bee2e2"}]},{"range":[{"fixed":"cda12de3bc0e333ea8d2c6fd15001dbdaf280015"}],"source":"REFERENCES_COMMIT"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"ff628933755075446bca8307e8417c14d164b535"}]}]}}],"versions":["3.4-POST-CLANG-FORMAT-WEBKIT","3.0-POST-CLANG-FORMAT-WEBKIT","3.4-PRE-CLANG-FORMAT-WEBKIT","3.3-POST-CLANG-FORMAT-WEBKIT","3.5-POST-CLANG-FORMAT-WEBKIT","3.0-PRE-CLANG-FORMAT-WEBKIT","3.3-PRE-CLANG-FORMAT-WEBKIT","3.5-PRE-CLANG-FORMAT-WEBKIT","3.6-POST-CLANG-FORMAT-WEBKIT","3.6-PRE-CLANG-FORMAT-WEBKIT","openssl-3.6.0","openssl-3.0.18","openssl-3.3.5","openssl-3.4.3","openssl-3.5.4","openssl-3.5.3","openssl-3.5.2","openssl-3.0.17","openssl-3.3.4","openssl-3.4.2","openssl-3.5.1","openssl-3.5.0","openssl-3.0.16","openssl-3.3.3","openssl-3.4.1","openssl-3.4.0","openssl-3.0.15","openssl-3.3.2","openssl-3.0.14","openssl-3.3.1","openssl-3.3.0","openssl-3.0.13","openssl-3.0.12","openssl-3.0.11","openssl-3.0.10","openssl-3.0.9","openssl-3.0.8","openssl-3.0.7","openssl-3.0.6","openssl-3.0.5","openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-69419.json","vanir_signatures":[{"digest":{"line_hashes":["156983863095094548535338968955595812811","153238992315641395177665058487653225478","172687070745160318315224274035905216378","27082460365194793330044320421038082754","4460307226245998230485764046985149278"],"threshold":0.9},"id":"CVE-2025-69419-00da600a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","target":{"file":"crypto/asn1/a_strex.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"145081246022159018632346591780852072638","length":3301},"id":"CVE-2025-69419-0115da44","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c","function":"ASN1_mbstring_ncopy"}},{"deprecated":false,"digest":{"function_hash":"32008225284128195658040746214741547285","length":1659},"id":"CVE-2025-69419-0148fae5","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","target":{"file":"crypto/asn1/a_strex.c","function":"do_buf"}},{"signature_version":"v1","source":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","target":{"file":"crypto/asn1/a_strex.c"},"deprecated":false,"digest":{"line_hashes":["156983863095094548535338968955595812811","153238992315641395177665058487653225478","172687070745160318315224274035905216378","27082460365194793330044320421038082754","4460307226245998230485764046985149278"],"threshold":0.9},"id":"CVE-2025-69419-0213822e","signature_type":"Line"},{"deprecated":false,"digest":{"length":1659,"function_hash":"32008225284128195658040746214741547285"},"id":"CVE-2025-69419-052d196a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","target":{"file":"crypto/asn1/a_strex.c","function":"do_buf"}},{"digest":{"function_hash":"269274151202672217402838615120421249016","length":733},"id":"CVE-2025-69419-09d18a1d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","target":{"file":"crypto/pkcs12/p12_utl.c","function":"OPENSSL_uni2utf8"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","target":{"file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"line_hashes":["8197119098003686502323758297771920675","123570346674886058532594910452998387419","330848004861723585376374210954232885669","125253330896326929862487700185368321824"],"threshold":0.9},"id":"CVE-2025-69419-0b816448"},{"id":"CVE-2025-69419-10c2ef8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/pkcs7/pk7_smime.c"},"deprecated":false,"digest":{"line_hashes":["151496904140441974460168482169374190024","252388763391472546762550272601898462670","322392321298523662111637318544365606017","92792830564595161366593755445407076135","125370360892352031658984319622272957499","135472893131710710891792272165369874557","144388576385066123595834036136006620631","251569583518298411383983956510462999062","190752638376984200658169048788492801771","100442701798321830557371459503827921141","157868922838337151802955969179465392317","247133924118207300622477622521703740882"],"threshold":0.9}},{"source":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","target":{"function":"do_buf","file":"crypto/asn1/a_strex.c"},"deprecated":false,"digest":{"length":1659,"function_hash":"32008225284128195658040746214741547285"},"id":"CVE-2025-69419-1a2ca58d","signature_type":"Function","signature_version":"v1"},{"target":{"file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"line_hashes":["8197119098003686502323758297771920675","123570346674886058532594910452998387419","330848004861723585376374210954232885669","125253330896326929862487700185368321824"],"threshold":0.9},"id":"CVE-2025-69419-20d57666","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2"},{"digest":{"line_hashes":["156983863095094548535338968955595812811","153238992315641395177665058487653225478","172687070745160318315224274035905216378","27082460365194793330044320421038082754","4460307226245998230485764046985149278"],"threshold":0.9},"id":"CVE-2025-69419-22e5ee54","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","target":{"file":"crypto/asn1/a_strex.c"},"deprecated":false},{"source":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","target":{"file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["181089593633653152713225066183099693737","99982428748013804425025524034573602503","330848004861723585376374210954232885669","125253330896326929862487700185368321824"]},"id":"CVE-2025-69419-234e393b","signature_type":"Line","signature_version":"v1"},{"target":{"function":"out_utf8","file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"length":148,"function_hash":"70418561901620867514045039520920039213"},"id":"CVE-2025-69419-315e1fbb","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"deprecated":false,"digest":{"length":733,"function_hash":"269274151202672217402838615120421249016"},"id":"CVE-2025-69419-3fc51a81","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","target":{"file":"crypto/pkcs12/p12_utl.c","function":"OPENSSL_uni2utf8"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","target":{"function":"OPENSSL_uni2utf8","file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"function_hash":"269274151202672217402838615120421249016","length":733},"id":"CVE-2025-69419-45d0ac02"},{"target":{"file":"crypto/pkcs12/p12_utl.c","function":"OPENSSL_uni2utf8"},"deprecated":false,"digest":{"length":733,"function_hash":"269274151202672217402838615120421249016"},"id":"CVE-2025-69419-4eb7055c","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535"},{"target":{"file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["8197119098003686502323758297771920675","123570346674886058532594910452998387419","330848004861723585376374210954232885669","125253330896326929862487700185368321824"]},"id":"CVE-2025-69419-503971c1","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","target":{"function":"OPENSSL_uni2utf8","file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"function_hash":"194066805760282325851600842112568984438","length":790},"id":"CVE-2025-69419-60009940"},{"source":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","target":{"file":"crypto/pkcs12/p12_utl.c"},"deprecated":false,"digest":{"line_hashes":["8197119098003686502323758297771920675","123570346674886058532594910452998387419","330848004861723585376374210954232885669","125253330896326929862487700185368321824"],"threshold":0.9},"id":"CVE-2025-69419-64282a80","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","target":{"file":"crypto/asn1/a_strex.c","function":"do_buf"},"deprecated":false,"digest":{"function_hash":"32008225284128195658040746214741547285","length":1659},"id":"CVE-2025-69419-6a40bc63","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"line_hashes":["131154213046974496778457434048691074837","11412147066710286517722597447846471117","264770296592556677305107142032766937388","276397443140848844849079658380453872857","195870554892312134442829321964179019399"],"threshold":0.9},"id":"CVE-2025-69419-87e36a00","signature_type":"Line"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["126341431044776940549287222658722596257","130570927788432269899785168744788951172","194169660864360803525450492876473860091","110467782499934282756168500046914951485","263946134258438649256241779625323641089","232531144570205203842568959033909256821","50105547378036962616739399907795763233","35026789599821935911816818772042439275","114710208109255960726965919362105298762","125554540231637930487019176647117002503","332182547294553747961268671162250805775","276033856309860817184326883455361222142","318268129131630080093563577138856184340","128526451235089518533697095563624199685","75522999902161732913968142567093758009","233242365504435285051066046524808432015","197089990496411212407345093272572794903","203627204430850126635677767987115907052","110527555710504927393608627867030602220","129739062881190220811156277727848860285","64544717289057079449815286406570439951","201167284819377777248970251144566099169","222516930768176972010755807924686646230","90961471150301180096894104068604511683","128676851434441285018275177161089865561","129724505883296824298208229090221093179","225269234833384762270352983556638638592","90371650052899301631217696225591147992","246784737627998664119002956221509877842","315371643750711437594895449353374659288","286011929765548229255520019142347591441","220624038106194157196845376518684753434","174882410006964856548150664239804105254","116231510630487651899483668166785513275"]},"id":"CVE-2025-69419-89e18e76","signature_type":"Line","signature_version":"v1"},{"target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","219260262152978755644652810379289549161","238161164963855964634408949729400551790","305007661457817428636275014467276783572","224942011457082636465204480559032896603","161399292792765951653776025419102349086","249748745323502641665219507560747603718","133814635171188589537358224623499256384","166636678108051380708454788668826388282","148812255457104429740188330155555022957","67995203963239490129688609208357985916","46589837028236721023105012731504719567","61425611895307496760454057009746874404"],"threshold":0.9},"id":"CVE-2025-69419-8be4f956","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"cms_RecipientInfo_pwri_crypt"},"deprecated":false,"digest":{"function_hash":"60884720753669845608764646390078165978","length":2404},"id":"CVE-2025-69419-8dac97cc","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","target":{"file":"crypto/asn1/a_strex.c"},"deprecated":false,"digest":{"line_hashes":["156983863095094548535338968955595812811","153238992315641395177665058487653225478","172687070745160318315224274035905216378","27082460365194793330044320421038082754","4460307226245998230485764046985149278"],"threshold":0.9},"id":"CVE-2025-69419-b5120323","signature_type":"Line"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c"},"deprecated":false,"digest":{"line_hashes":["319646123228225632035521226865494527950","52841444872899117514496250284924185664","33853134948390324832871761212087746225","81188860042095766577152905858367341175","302749459819436303573414214711383738500","106372169618065324582769687411773396323","255586470514418239073904203556570502151","316909758438434070933019317604952931093","227036639418218030553513135503985645880","19797040175335443903820697047342526981","3213252085324805485799329367541299827","167277605188112932709311947349617776953","33676618202441094170922943458357128290"],"threshold":0.9},"id":"CVE-2025-69419-c30f17c3","signature_type":"Line","signature_version":"v1"},{"target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9},"id":"CVE-2025-69419-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"deprecated":false,"digest":{"function_hash":"219999985288845958916653358585559913606","length":2843},"id":"CVE-2025-69419-db231d4a","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"function":"asn1_ex_c2i","file":"crypto/asn1/tasn_dec.c"}},{"deprecated":false,"digest":{"function_hash":"130089047505679726786813950750828918851","length":1031},"id":"CVE-2025-69419-df118fd8","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"function":"kek_unwrap_key","file":"crypto/cms/cms_pwri.c"}},{"source":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","target":{"file":"crypto/asn1/a_strex.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["156983863095094548535338968955595812811","153238992315641395177665058487653225478","172687070745160318315224274035905216378","27082460365194793330044320421038082754","4460307226245998230485764046985149278"]},"id":"CVE-2025-69419-e10f6cf8","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2025-69419-e8965605","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","target":{"file":"crypto/asn1/a_strex.c","function":"do_buf"},"deprecated":false,"digest":{"function_hash":"32008225284128195658040746214741547285","length":1659}}],"vanir_signatures_modified":"2026-11-11T13:23:11Z"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}