https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:19:48.553299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-7053 CVE-2016-7053 — CMS Null dereference 2026-10-04T07:19:48.554502+00:00

Affected: OpenSSL

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.