Cyber Resilience

CVE-2026-41898

Memory Safety in Rust-Openssl Project Rust-Openssl 0.9.24 – 0.10.78

Memory Safety
Published
24 April 2026
Modified
15 July 2026
Patch / advisory
View advisory
CVSS Score v4 8.3
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0028 21th percentile
Risk Priority 43 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2026-41898 is a high-severity Buffer Over-read (CWE-126) vulnerability in Rust-Openssl Project Rust-Openssl. Its CVSS base score is 8.3 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique OS Credential Dumping (T1003); ranked at the 21th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2026-41898 is a buffer overflow vulnerability in rust-openssl, a crate providing OpenSSL bindings for the Rust programming language. Affected versions range from 0.9.24 up to but not including 0.10.78. The issue stems from FFI trampolines in SslContextBuilder methods set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb, which forward the user closure's returned usize value directly to OpenSSL without validating it against the provided &mut [u8] buffer. This flaw, mapped to CWE-126 (Buffer Over-read) and CWE-130 (Improper Handling of Length Parameter Inconsistency), carries a CVSS v3.1 base score of 9.8.

Remote attackers require no privileges, authentication, or user interaction to exploit this over the network with low complexity. By triggering the affected callbacks during TLS handshake processes involving PSK or stateless cookies, adversaries can induce buffer overflows in the underlying OpenSSL library, potentially resulting in high confidentiality, integrity, and availability impacts such as arbitrary code execution, data corruption, or denial of service.

The vulnerability is addressed in rust-openssl version 0.10.78, where the trampolines now properly validate the returned length against the buffer size. Security practitioners should upgrade to this version or later. Relevant resources include the fixing commit (1d109020d98fff2fb2e45c39a373af3dff99b24c), pull request #2607, release announcement for v0.10.78, and the GitHub security advisory GHSA-hppc-g8h3-xhp3.

EU & UK References

Vulnerability Data

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut [u8] that…

more

was handed to the closure. This can lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78.

CWE(s)
CWE-126CWE-130

Related Threats

MITRE ATT&CK Enterprise Techniques

T1003 OS Credential Dumping Credential Access
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.
attack.mitre.org →
T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
attack.mitre.org →
T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-41681Same product: Rust-Openssl Project Rust-Openssl
CVE-2026-41677Same product: Rust-Openssl Project Rust-Openssl
CVE-2026-41678Same product: Rust-Openssl Project Rust-Openssl
CVE-2026-41676Same product: Rust-Openssl Project Rust-Openssl
CVE-2026-4371Shared CWE-126, CWE-130
CVE-2026-50402Shared CWE-126
CVE-2024-45561Shared CWE-126
CVE-2025-62467Shared CWE-126
CVE-2026-27799Shared CWE-126
CVE-2025-4582Shared CWE-126

Affected Assets

rust-openssl project
rust-openssl
0.9.24 — 0.10.78

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

—

Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V3.5.5
  • V4.2.1
  • V4.2.2

Mitigating Controls (NIST 800-53 r5) AI

SA-11 Developer Testing and Evaluation good match

Developer testing and evaluation (static analysis, fuzzing, bounds checking tests) directly finds buffer over-read flaws.

SI-10 Information Input Validation good match

Input validation enforces correct length-to-data consistency checks on parsed messages before processing.

SA-8 Security and Privacy Engineering Principles partial match

Engineering principles such as memory-safe design and bounds-checked abstractions structurally stop introduction of out-of-bounds reads.

SC-39 Process Isolation partial match

Process isolation limits the blast radius of an over-read to the compromised domain.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover buffer over-read flaws via scanning or review.

PR.PS-02 partial match
prevents

Patching or replacing vulnerable software removes known instances of buffer over-read bugs.

PR.PS-06 partial match
prevents

Secure development practices directly prevent introduction of buffer over-read weaknesses.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.25 Secure development life cycle partial match
prevents

Secure SDLC mandates input validation and bounds checking that can prevent buffer over-reads.

A.8.26 Application security requirements partial match
prevents

Application security requirements can specify buffer-size and bounds-checking rules.

A.8.27 Secure system architecture and engineering principles partial match
prevents

Secure architecture principles include memory-safety and bounds-checking design choices.

A.8.28 Secure coding partial match
prevents

Secure coding standards directly require bounds-checked buffer access, mitigating over-reads.

A.8.29 Security testing in development and acceptance partial match
finds

Security testing in development can detect buffer over-reads before release.

References