CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are vulnerable to a denial-of-service attack due to improper validation of the total field in QR JSON payloads, allowing attackers to exploit crafted QR images with excessively large total values. This can lead to unbounded memory allocation, resulting in out-of-memory conditions that disrupt service availability. Organizations using affected OpenSSL versions should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)