CVE-2026-22791

A flaw was found in openCryptoki, a library for cryptographic operations. A local attacker can exploit a heap buffer overflow vulnerability within the CKM_ECDH_AES_KEY_WRAP implementation. By providing a compressed Elliptic Curve (EC) public key and invoking the C_WrapKey function, the attacker can trigger out-of-bounds writes. This can lead to heap corruption and a denial-of-service (DoS) condition, making the application unavailable.

A local attacker can exploit a heap buffer overflow in openCryptoki's CKM_ECDH_AES_KEY_WRAP implementation, leading to heap corruption and denial of service. This vulnerability has been rated as Moderate by the Red Hat Product security team as, although it may lead to a out-of-bounds write, the impact is limited. When exploiting this vulnerability the attacker has little control over the memory position to be overwritten, additionally the size of the buffer being overwritten is relatively small (around 32 bytes for a P-256 public key for example) making it very difficult to inject any valid payload into memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.