{"id":"CVE-2026-7383","summary":"Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion","details":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.","modified":"2026-11-11T13:27:27.672701120Z","published":"2026-06-09T16:03:15.508Z","related":["ALSA-2026:25237","ALSA-2026:25239","SUSE-SU-2026:22100-1","SUSE-SU-2026:22132-1","SUSE-SU-2026:22251-1","SUSE-SU-2026:22315-1","SUSE-SU-2026:2392-1","SUSE-SU-2026:2393-1","SUSE-SU-2026:2396-1","SUSE-SU-2026:2397-1","SUSE-SU-2026:2399-1","SUSE-SU-2026:2403-1","SUSE-SU-2026:2404-1","SUSE-SU-2026:2405-1","SUSE-SU-2026:2598-1","SUSE-SU-2026:2614-1","SUSE-SU-2026:2648-1","openSUSE-SU-2026:11023-1","openSUSE-SU-2026:21005-1"],"database_specific":{"cwe_ids":["CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7383.json","cna_assigner":"openssl"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7383.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7383"},{"type":"ADVISORY","url":"https://openssl-library.org/news/secadv/20260609.txt"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/alsyundawy/openssl-1.0.2","events":[{"introduced":"c46078156d49453ba69badc9addb1e2dcd1c71f5"},{"fixed":"c46078156d49453ba69badc9addb1e2dcd1c71f5"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2"},{"fixed":"1.0.2zq"}]}]}},{"type":"GIT","repo":"https://github.com/kzalewski/openssl-1.1.1","events":[{"introduced":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"fixed":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1"},{"fixed":"1.1.1zh"}]}]}},{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"fixed":"51ea949dc1436e865935b47874b21a3bb31a102e"},{"introduced":"98acb6b02839c609ef5b837794e08d906d965335"},{"fixed":"c5ea1cc227fd60afae8ac4b9438690bbe4888f79"},{"introduced":"636dfadc70ce26f2473870570bfd9ec352806b1d"},{"fixed":"8cf17aaeb4599f8af87fefd810b5b5fee90fe69e"},{"introduced":"7b371d80d959ec9ab4139d09d78e83c090de9779"},{"fixed":"aae016bfd52fcad2bc9657c2c782cfdf73b1ed5f"},{"introduced":"11b7b6ea3b65a584e1d31408ed1bdb139465cffd"},{"fixed":"4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6"},{"fixed":"80c15faaf78042bbb8654a0e234c50c381732f74"},{"fixed":"bd17511070fb39a67bfa19682affb765e706a974"},{"fixed":"c332adaced43bcbb85f97410597e951c11ec3083"},{"fixed":"d32350ae8ef7426718f5aa9e383d4b51398ee255"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2"},{"fixed":"1.0.2zq"}]},{"range":[{"introduced":"1.1.1"},{"fixed":"1.1.1zh"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.0.0"},{"fixed":"3.0.21"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.0"},{"fixed":"3.4.6"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.5.0"},{"fixed":"3.5.7"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.6.0"},{"fixed":"3.6.3"}],"source":"CPE_RANGE"},{"cpe":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","range":[{"introduced":"4.0.0-NA"},{"last_affected":"4.0.0-NA"}],"source":"CPE_STRING"},{"range":[{"fixed":"4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6"}],"source":"REFERENCES_COMMIT"},{"range":[{"fixed":"80c15faaf78042bbb8654a0e234c50c381732f74"}],"source":"REFERENCES_COMMIT"},{"range":[{"fixed":"bd17511070fb39a67bfa19682affb765e706a974"}],"source":"REFERENCES_COMMIT"},{"range":[{"fixed":"c332adaced43bcbb85f97410597e951c11ec3083"}],"source":"REFERENCES_COMMIT"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"d32350ae8ef7426718f5aa9e383d4b51398ee255"}]}]}}],"versions":["4.0.0-NA","openssl-4.0.0","openssl-3.0.20","openssl-3.4.5","openssl-3.5.6","openssl-3.6.2","openssl-3.0.19","openssl-3.4.4","openssl-3.5.5","openssl-3.6.1","3.4-POST-CLANG-FORMAT-WEBKIT","3.0-POST-CLANG-FORMAT-WEBKIT","3.4-PRE-CLANG-FORMAT-WEBKIT","3.5-POST-CLANG-FORMAT-WEBKIT","3.0-PRE-CLANG-FORMAT-WEBKIT","3.5-PRE-CLANG-FORMAT-WEBKIT","3.6-POST-CLANG-FORMAT-WEBKIT","3.6-PRE-CLANG-FORMAT-WEBKIT","openssl-3.6.0","openssl-3.0.18","openssl-3.4.3","openssl-3.5.4","openssl-3.5.3","openssl-3.5.2","openssl-3.0.17","openssl-3.4.2","openssl-3.5.1","openssl-3.5.0","openssl-3.0.16","openssl-3.4.1","openssl-3.4.0","openssl-3.0.15","openssl-3.0.14","openssl-3.0.13","openssl-3.0.12","openssl-3.0.11","openssl-3.0.10","openssl-3.0.9","openssl-3.0.8","openssl-3.0.7","openssl-3.0.6","openssl-3.0.5","openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-7383.json","vanir_signatures":[{"id":"CVE-2026-7383-0115da44","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c","function":"ASN1_mbstring_ncopy"},"deprecated":false,"digest":{"length":3301,"function_hash":"145081246022159018632346591780852072638"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","314277570596906803737453056118000261489","134443953973411113628429047361571354695","144241986910067820723321631094658024558","219027348492242387101505984291253252762","197249709654825572065845136116068698100","335442194952519091195796659076425621527","94024945373243508884955678864647600249","58865074517344503016033744066393422789","171075818861470609519508474684508188088","183308020435695821222991028080353540824","112766856209011567470513760761740501796"]},"id":"CVE-2026-7383-03cd20c7"},{"digest":{"threshold":0.9,"line_hashes":["151496904140441974460168482169374190024","252388763391472546762550272601898462670","322392321298523662111637318544365606017","92792830564595161366593755445407076135","125370360892352031658984319622272957499","135472893131710710891792272165369874557","144388576385066123595834036136006620631","251569583518298411383983956510462999062","190752638376984200658169048788492801771","100442701798321830557371459503827921141","157868922838337151802955969179465392317","247133924118207300622477622521703740882"]},"id":"CVE-2026-7383-10c2ef8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/pkcs7/pk7_smime.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","target":{"function":"ASN1_mbstring_ncopy","file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"function_hash":"157368430457296408057518218641344868108","length":3297},"id":"CVE-2026-7383-1be3bd59"},{"deprecated":false,"digest":{"length":148,"function_hash":"70418561901620867514045039520920039213"},"id":"CVE-2026-7383-315e1fbb","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c","function":"out_utf8"}},{"digest":{"function_hash":"326715636192485159031379249291784863467","length":195},"id":"CVE-2026-7383-35f12443","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","target":{"file":"crypto/asn1/a_mbstr.c","function":"out_utf8"},"deprecated":false},{"target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","314277570596906803737453056118000261489","134443953973411113628429047361571354695","144241986910067820723321631094658024558","219027348492242387101505984291253252762","197249709654825572065845136116068698100","335442194952519091195796659076425621527","94024945373243508884955678864647600249","58865074517344503016033744066393422789","171075818861470609519508474684508188088","183308020435695821222991028080353540824","112766856209011567470513760761740501796"]},"id":"CVE-2026-7383-53da0590","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255"},{"deprecated":false,"digest":{"length":195,"function_hash":"326715636192485159031379249291784863467"},"id":"CVE-2026-7383-5a2e414f","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","target":{"file":"crypto/asn1/a_mbstr.c","function":"out_utf8"}},{"digest":{"threshold":0.9,"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","314277570596906803737453056118000261489","134443953973411113628429047361571354695","144241986910067820723321631094658024558","219027348492242387101505984291253252762","197249709654825572065845136116068698100","335442194952519091195796659076425621527","94024945373243508884955678864647600249","58865074517344503016033744066393422789","171075818861470609519508474684508188088","183308020435695821222991028080353540824","112766856209011567470513760761740501796"]},"id":"CVE-2026-7383-6d93e3cf","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"186349096673253037366471905327905215678","length":3172},"id":"CVE-2026-7383-6ea28808","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","target":{"function":"ASN1_mbstring_ncopy","file":"crypto/asn1/a_mbstr.c"}},{"digest":{"length":195,"function_hash":"326715636192485159031379249291784863467"},"id":"CVE-2026-7383-6ecfcbdc","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","target":{"function":"out_utf8","file":"crypto/asn1/a_mbstr.c"},"deprecated":false},{"digest":{"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","314277570596906803737453056118000261489","134443953973411113628429047361571354695","144241986910067820723321631094658024558","219027348492242387101505984291253252762","197249709654825572065845136116068698100","335442194952519091195796659076425621527","94024945373243508884955678864647600249","58865074517344503016033744066393422789","171075818861470609519508474684508188088","183308020435695821222991028080353540824","112766856209011567470513760761740501796"],"threshold":0.9},"id":"CVE-2026-7383-7397b06f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false},{"deprecated":false,"digest":{"length":3109,"function_hash":"65331361705884786675178309567558276074"},"id":"CVE-2026-7383-810515e4","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","target":{"function":"ASN1_mbstring_ncopy","file":"crypto/asn1/a_mbstr.c"}},{"digest":{"function_hash":"65331361705884786675178309567558276074","length":3109},"id":"CVE-2026-7383-81b05481","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","target":{"function":"ASN1_mbstring_ncopy","file":"crypto/asn1/a_mbstr.c"},"deprecated":false},{"target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"line_hashes":["131154213046974496778457434048691074837","11412147066710286517722597447846471117","264770296592556677305107142032766937388","276397443140848844849079658380453872857","195870554892312134442829321964179019399"],"threshold":0.9},"id":"CVE-2026-7383-87e36a00","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"id":"CVE-2026-7383-89e18e76","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c"},"deprecated":false,"digest":{"line_hashes":["126341431044776940549287222658722596257","130570927788432269899785168744788951172","194169660864360803525450492876473860091","110467782499934282756168500046914951485","263946134258438649256241779625323641089","232531144570205203842568959033909256821","50105547378036962616739399907795763233","35026789599821935911816818772042439275","114710208109255960726965919362105298762","125554540231637930487019176647117002503","332182547294553747961268671162250805775","276033856309860817184326883455361222142","318268129131630080093563577138856184340","128526451235089518533697095563624199685","75522999902161732913968142567093758009","233242365504435285051066046524808432015","197089990496411212407345093272572794903","203627204430850126635677767987115907052","110527555710504927393608627867030602220","129739062881190220811156277727848860285","64544717289057079449815286406570439951","201167284819377777248970251144566099169","222516930768176972010755807924686646230","90961471150301180096894104068604511683","128676851434441285018275177161089865561","129724505883296824298208229090221093179","225269234833384762270352983556638638592","90371650052899301631217696225591147992","246784737627998664119002956221509877842","315371643750711437594895449353374659288","286011929765548229255520019142347591441","220624038106194157196845376518684753434","174882410006964856548150664239804105254","116231510630487651899483668166785513275"],"threshold":0.9}},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","219260262152978755644652810379289549161","238161164963855964634408949729400551790","305007661457817428636275014467276783572","224942011457082636465204480559032896603","161399292792765951653776025419102349086","249748745323502641665219507560747603718","133814635171188589537358224623499256384","166636678108051380708454788668826388282","148812255457104429740188330155555022957","67995203963239490129688609208357985916","46589837028236721023105012731504719567","61425611895307496760454057009746874404"],"threshold":0.9},"id":"CVE-2026-7383-8be4f956","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"cms_RecipientInfo_pwri_crypt"},"deprecated":false,"digest":{"function_hash":"60884720753669845608764646390078165978","length":2404},"id":"CVE-2026-7383-8dac97cc","signature_type":"Function"},{"deprecated":false,"digest":{"length":195,"function_hash":"326715636192485159031379249291784863467"},"id":"CVE-2026-7383-a18e4192","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","target":{"file":"crypto/asn1/a_mbstr.c","function":"out_utf8"}},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["319646123228225632035521226865494527950","52841444872899117514496250284924185664","33853134948390324832871761212087746225","81188860042095766577152905858367341175","302749459819436303573414214711383738500","106372169618065324582769687411773396323","255586470514418239073904203556570502151","316909758438434070933019317604952931093","227036639418218030553513135503985645880","19797040175335443903820697047342526981","3213252085324805485799329367541299827","167277605188112932709311947349617776953","33676618202441094170922943458357128290"]},"id":"CVE-2026-7383-c30f17c3","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"]},"id":"CVE-2026-7383-c377fa22"},{"digest":{"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","314277570596906803737453056118000261489","134443953973411113628429047361571354695","144241986910067820723321631094658024558","219027348492242387101505984291253252762","197249709654825572065845136116068698100","335442194952519091195796659076425621527","94024945373243508884955678864647600249","58865074517344503016033744066393422789","171075818861470609519508474684508188088","183308020435695821222991028080353540824","112766856209011567470513760761740501796"],"threshold":0.9},"id":"CVE-2026-7383-d050859d","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c","function":"asn1_ex_c2i"},"deprecated":false,"digest":{"function_hash":"219999985288845958916653358585559913606","length":2843},"id":"CVE-2026-7383-db231d4a","signature_type":"Function"},{"digest":{"length":1031,"function_hash":"130089047505679726786813950750828918851"},"id":"CVE-2026-7383-df118fd8","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"kek_unwrap_key"},"deprecated":false},{"source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"},"deprecated":false,"digest":{"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"],"threshold":0.9},"id":"CVE-2026-7383-e051451f","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","target":{"file":"crypto/asn1/a_mbstr.c","function":"ASN1_mbstring_ncopy"},"deprecated":false,"digest":{"function_hash":"157368430457296408057518218641344868108","length":3297},"id":"CVE-2026-7383-e999ea89"},{"deprecated":false,"digest":{"length":195,"function_hash":"326715636192485159031379249291784863467"},"id":"CVE-2026-7383-fb21566a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","target":{"function":"out_utf8","file":"crypto/asn1/a_mbstr.c"}}],"vanir_signatures_modified":"2026-11-11T13:27:27Z"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}