MNBSD-2026-41: missing ASN1_TYPE validation in PKCS#12 parsing

Description

An invalid or NULL pointer dereference can occur in an application processing a malformed PKCS#12 file, resulting in a Denial of Service. Severity: Low (OpenSSL).

Affected Versions

openssl

Recommendations

No specific recommendations provided.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-22795
• https://openssl-library.org/news/vulnerabilities/#CVE-2026-22795

Additional Information

Aliases: CVE-2026-22795

Published: June 11, 2026
Last Modified: June 11, 2026