CVE-2026-14355

A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocation and subsequently a heap-based buffer overflow, causing memory corruption that later is surfaced as an application abort that results in a denial of service.

To exploit this issue, an attacker needs to find an application using the AES-WRAP-PAD algorithm. This algorithm is rarely used, limiting the exposure of this vulnerability. Additionally, the memory allocator can detect the heap-based buffer overflow and will abort the process with no other security impact. For these reasons, this issue has been rated with a moderate severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, do not use the AES-WRAP-PAD algorithm, by switching to a secure alternative.