Stack buffer overflow in CMS (Auth)EnvelopedData parsing

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-15467 · Microsoft / collected KEV context

cve-program · CVE-2025-15467

• https://openssl-library.org/news/secadv/20260127.txt
• https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703
• https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc
• https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3
• https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9
• https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e

No related operational record is retained in the current change model.