AIKIDO-2026-341396
openssl is vulnerable to Improper Integrity Validation
37
Low Risk
This Affects:
opensslTL;DR
EVP_Cipher() finalizes ChaCha20-Poly1305 and AES-OCB decryption in one call and is expected to check the authentication tag. An empty ciphertext skips that tag check, so the call can return success for a tag that was never verified and the application can accept a forged empty message. The fix checks the tag on the empty ciphertext path before it reports success.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application calls EVP_Cipher() for ChaCha20-Poly1305 or AES-OCB.
Background info
openssl is vulnerable to Improper Integrity Validation in versions 3.0.0 - 3.0.21, 3.4.0 - 3.4.6, 3.5.0 - 3.5.7, 3.6.0 - 3.6.3 and 4.0.0 - 4.0.1.
How to fix this
Upgrade the openssl library to the patch version.
Links
GitHub Release
Fix Commits
github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05bgithub.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6agithub.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.