Intel/AIKIDO-2024-10549
openssl
AIKIDO-2024-10549
openssl is vulnerable to Buffer Overflow
Buffer OverflowCVE-2025-54370
40
Medium Risk
This Affects:
openssl1.0.0 - 3.0.2
Fixed in 3.0.33.1.0 - 3.1.0
Fixed in 3.1.13.2.0 - 3.2.0
Fixed in 3.2.1TL;DR
Affected versions of this package use methods that currently allocate the output buffer using (input data length) + (cipher block size). This allocation is insufficient for most of the wrap-pad ciphers, potentially leading to crashes and outages.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
openssl is vulnerable to Buffer Overflow in versions 1.0.0 - 3.0.2, 3.1.0 - 3.1.0 and 3.2.0 - 3.2.0.
How to fix this
Upgrade the openssl library to a patch version.
Links
GitHub Release
Fix Commits
github.com/PHPOffice/PhpSpreadsheet/commit/334a67797ace574d1d37c0992ffe283b7415471ahttps://github.com/PHPOffice/PhpSpreadsheet/commit/334a67797ace574d1d37c0992ffe283b7415471a
github.com/PHPOffice/PhpSpreadsheet/commit/4050f14521d70634c3320b170236574a6106eb39https://github.com/PHPOffice/PhpSpreadsheet/commit/4050f14521d70634c3320b170236574a6106eb39
github.com/PHPOffice/PhpSpreadsheet/commit/81a0de2261f698404587a6421a5c6eb263c40b31https://github.com/PHPOffice/PhpSpreadsheet/commit/81a0de2261f698404587a6421a5c6eb263c40b31
github.com/PHPOffice/PhpSpreadsheet/commit/ac4befd2f7ccc21a59daef606a02a3d1828ade09https://github.com/PHPOffice/PhpSpreadsheet/commit/ac4befd2f7ccc21a59daef606a02a3d1828ade09
github.com/PHPOffice/PhpSpreadsheet/commit/c2cd0e64392438e4c6af082796eb65c1d629a266https://github.com/PHPOffice/PhpSpreadsheet/commit/c2cd0e64392438e4c6af082796eb65c1d629a266
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
Resources
Industries
Use Cases
Compare
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
Ghent, Belgium | San Francisco, US
SOC 2Compliant
ISO 27001Compliant