CVE-2026-75803
CVE-2026-75803 · AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and expecting the call to check the AEAD tag may accept forged messages. CWE: CWE-354 (Improper Validation of Integrity Check Value) Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one shot encryption and decryption call. It also verifies the AEAD tag after the decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers it skipped the AEAD tag verification when an empty ciphertext was passed to the function. The callers of this function might believe that a successful return indicates a valid AEAD tag for these ciphers, even when that has not truly been validated in this case. FIPS impact: no The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as the affected algorithms are not FIPS approved and thus not implemented in the FIPS module.
CVSS 9.1 · Critical · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
openssl
- Versions
- ≥ 4.0.0, < 4.0.2: Affected (semver)
- ≥ 3.6.0, < 3.6.4: Affected (semver)
- ≥ 3.5.0, < 3.5.8: Affected (semver)
- ≥ 3.4.0, < 3.4.7: Affected (semver)
- ≥ 3.0.0, < 3.0.22: Affected (semver)
Update to 3.0.22; Update to 3.4.7; Update to 3.5.8; Update to 3.6.4; Update to 4.0.2
openssl Debian:12
- Versions
- 3.0.10-1
- 3.0.10-1~deb12u1
- 3.0.11-1
- 3.0.11-1~deb12u1
- 3.0.11-1~deb12u2
- 3.0.12-1
- 3.0.12-2
- 3.0.13-1~deb12u1
- 3.0.13-1~deb12u2
- 3.0.14-1~deb12u1
- 3.0.14-1~deb12u2
- 3.0.15-1~deb12u1
- 3.0.16-1~deb12u1
- 3.0.17-1~deb12u1
- 3.0.17-1~deb12u2
- 3.0.17-1~deb12u3
- 3.0.18-1~deb12u1
- 3.0.18-1~deb12u2
- 3.0.19-1~deb12u1
- 3.0.19-1~deb12u2
- 3.0.20-1~deb12u1
- 3.0.20-1~deb12u2
- 3.0.9-1
- Affected ranges
- ECOSYSTEM: < 3.0.22-1~deb12u1
Update to 3.0.22-1~deb12u1
openssl Debian:13
- Versions
- 3.5.1-1
- 3.5.1-1+deb13u1
- 3.5.2-1
- 3.5.3-1
- 3.5.4-1
- 3.5.4-1~deb13u1
- 3.5.4-1~deb13u2
- 3.5.5-1
- 3.5.5-1~deb13u1
- 3.5.5-1~deb13u2
- 3.5.6-1~deb13u1
- 3.5.6-1~deb13u2
- 3.5.7-1~deb13u1
- Affected ranges
- ECOSYSTEM: < 3.5.7-1~deb13u2
Update to 3.5.7-1~deb13u2
openssl Debian:14
- Versions
- 3.5.1-1
- 3.5.2-1
- 3.5.3-1
- 3.5.4-1
- 3.5.4-1~deb13u1
- 3.5.4-1~deb13u2
- 3.5.5-1
- 3.5.5-1~deb13u1
- 3.5.5-1~deb13u2
- 3.5.6-1~deb13u1
- 3.5.6-1~deb13u2
- 3.5.7-1~deb13u1
- 3.5.7-1~deb13u2
- 3.5.7-1~deb13u3
- 3.6.0-1
- 3.6.0-2
- 3.6.0~~alpha1-1
- 3.6.0~~beta1-1
- 3.6.1-1
- 3.6.1-2
- 3.6.1-3
- 3.6.2-1
- 3.6.3-1
- Affected ranges
- ECOSYSTEM: < 3.6.4-1
Update to 3.6.4-1
nodejs Ubuntu:Pro:16.04:LTS
- Versions
- 0.10.25~dfsg2-2ubuntu1
- 4.2.2~dfsg-1
- 4.2.3~dfsg-1
- 4.2.4~dfsg-1ubuntu1
- 4.2.4~dfsg-2
- 4.2.6~dfsg-1ubuntu1
- 4.2.6~dfsg-1ubuntu4
- 4.2.6~dfsg-1ubuntu4.1
- 4.2.6~dfsg-1ubuntu4.2
- 4.2.6~dfsg-1ubuntu4.2+esm1
- 4.2.6~dfsg-1ubuntu4.2+esm2
- 4.2.6~dfsg-1ubuntu4.2+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nodejs Ubuntu:Pro:18.04:LTS
- Versions
- 6.11.4~dfsg-1ubuntu1
- 6.11.4~dfsg-1ubuntu2
- 6.12.0~dfsg-1ubuntu1
- 6.12.0~dfsg-2ubuntu1
- 6.12.0~dfsg-2ubuntu2
- 8.10.0~dfsg-2
- 8.10.0~dfsg-2ubuntu0.2
- 8.10.0~dfsg-2ubuntu0.3
- 8.10.0~dfsg-2ubuntu0.4
- 8.10.0~dfsg-2ubuntu0.4+esm1
- 8.10.0~dfsg-2ubuntu0.4+esm2
- 8.10.0~dfsg-2ubuntu0.4+esm3
- 8.10.0~dfsg-2ubuntu0.4+esm4
- 8.10.0~dfsg-2ubuntu0.4+esm5
- 8.10.0~dfsg-2ubuntu0.4+esm6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:22.04:LTS
- Versions
- 1.1.1l-1ubuntu1
- 3.0.0-1ubuntu1
- 3.0.1-0ubuntu1
- 3.0.2-0ubuntu1
- 3.0.2-0ubuntu1.1
- 3.0.2-0ubuntu1.2
- 3.0.2-0ubuntu1.4
- 3.0.2-0ubuntu1.5
- 3.0.2-0ubuntu1.6
- 3.0.2-0ubuntu1.7
- 3.0.2-0ubuntu1.8
- 3.0.2-0ubuntu1.9
- 3.0.2-0ubuntu1.10
- 3.0.2-0ubuntu1.12
- 3.0.2-0ubuntu1.13
- 3.0.2-0ubuntu1.14
- 3.0.2-0ubuntu1.15
- 3.0.2-0ubuntu1.16
- 3.0.2-0ubuntu1.17
- 3.0.2-0ubuntu1.18
- 3.0.2-0ubuntu1.19
- 3.0.2-0ubuntu1.20
- 3.0.2-0ubuntu1.21
- 3.0.2-0ubuntu1.23
- 3.0.2-0ubuntu1.25
- 3.0.2-0ubuntu1.26
- Affected ranges
- ECOSYSTEM: < 3.0.2-0ubuntu1.29
Update to 3.0.2-0ubuntu1.29
openssl Ubuntu:Pro:FIPS-preview:22.04:LTS
- Versions
- 3.0.2-0ubuntu1.10+Fips1
- 3.0.2-0ubuntu1.12+Fips1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl-fips Ubuntu:Pro:FIPS-preview:22.04:LTS
- Versions
- 3.0.5-0ubuntu0.1+Fips2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:Pro:FIPS-updates:22.04:LTS
- Versions
- 3.0.2-0ubuntu1.10+Fips1
- 3.0.2-0ubuntu1.12+Fips1
- 3.0.2-0ubuntu1.14+Fips1
- 3.0.2-0ubuntu1.15+Fips1
- 3.0.2-0ubuntu1.16+Fips1
- 3.0.2-0ubuntu1.17+Fips1
- 3.0.2-0ubuntu1.18+Fips1
- 3.0.2-0ubuntu1.19+Fips1
- 3.0.2-0ubuntu1.20+Fips1
- 3.0.2-0ubuntu1.21+Fips1
- 3.0.2-0ubuntu1.23+Fips1
- 3.0.2-0ubuntu1.25+Fips1
- 3.0.2-0ubuntu1.26+Fips1
- Affected ranges
- ECOSYSTEM: < 3.0.2-0ubuntu1.29+Fips1
Update to 3.0.2-0ubuntu1.29+Fips1
openssl-fips Ubuntu:Pro:FIPS-updates:22.04:LTS
- Versions
- 3.0.5-0ubuntu0.1+Fips2.1
- 3.0.5-0ubuntu0.2+Fips1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:24.04:LTS
- Versions
- 2023.05-2
- 2023.11-2
- 2023.11-3
- 2023.11-4
- 2023.11-5
- 2023.11-6
- 2023.11-8
- 2024.02-1
- 2024.02-2
- 2024.02-2ubuntu0.1
- 2024.02-2ubuntu0.3
- 2024.02-2ubuntu0.4
- 2024.02-2ubuntu0.5
- 2024.02-2ubuntu0.6
- 2024.02-2ubuntu0.7
- 2024.02-2ubuntu0.8
- 2024.02-2ubuntu0.9
- Affected ranges
- ECOSYSTEM: < 2024.02-2ubuntu0.10
Update to 2024.02-2ubuntu0.10
openssl Ubuntu:24.04:LTS
- Versions
- 3.0.10-1ubuntu2
- 3.0.10-1ubuntu2.1
- 3.0.10-1ubuntu3
- 3.0.10-1ubuntu4
- 3.0.13-0ubuntu2
- 3.0.13-0ubuntu3
- 3.0.13-0ubuntu3.1
- 3.0.13-0ubuntu3.2
- 3.0.13-0ubuntu3.3
- 3.0.13-0ubuntu3.4
- 3.0.13-0ubuntu3.5
- 3.0.13-0ubuntu3.6
- 3.0.13-0ubuntu3.7
- 3.0.13-0ubuntu3.9
- 3.0.13-0ubuntu3.11
- 3.0.13-0ubuntu3.12
- Affected ranges
- ECOSYSTEM: < 3.0.13-0ubuntu3.15
Update to 3.0.13-0ubuntu3.15
openssl-fips Ubuntu:Pro:FIPS-updates:24.04:LTS
- Versions
- 3.0.13-0ubuntu3+Fips1
- 3.0.13-0ubuntu3.6+Fips1
- 3.0.13-0ubuntu3.12+Fips1
- Affected ranges
- ECOSYSTEM: < 3.0.13-0ubuntu3.15+Fips1
Update to 3.0.13-0ubuntu3.15+Fips1
edk2 Ubuntu:26.10
- Versions
- 2025.11-3ubuntu7
- 2025.11-3ubuntu8
- 2026.05-2ubuntu1
- 2026.05-2ubuntu2
- 2026.05-2ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2-hwe Ubuntu:26.10
- Versions
- 2025.11-3ubuntu8
- 2025.11-3ubuntu9
- 2026.05-2ubuntu1
- 2026.05-2ubuntu2
- 2026.05-2ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:26.04:LTS
- Versions
- 2025.02-8ubuntu3
- 2025.11-3ubuntu6
- 2025.11-3ubuntu7
- 2025.11-3ubuntu7.2
- Affected ranges
- ECOSYSTEM: < 2025.11-3ubuntu7.3
Update to 2025.11-3ubuntu7.3
edk2-hwe Ubuntu:26.04:LTS
- Versions
- 2025.11-3ubuntu6
- 2025.11-3ubuntu8
- 2025.11-3ubuntu8.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:26.04:LTS
- Versions
- 3.5.3-1ubuntu2
- 3.5.5-1ubuntu1
- 3.5.5-1ubuntu3
- 3.5.5-1ubuntu3.2
- 3.5.5-1ubuntu3.3
- 3.5.5-1ubuntu3.4
- Affected ranges
- ECOSYSTEM: < 3.5.5-1ubuntu3.5
Update to 3.5.5-1ubuntu3.5
Original sources
- https://openssl-library.org/news/secadv/20260825.txt
- https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a
- https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b
- https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34
- https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9
- https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42
- https://nvd.nist.gov/vuln/detail/CVE-2026-75803