{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-75803", "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", "state": "PUBLISHED", "assignerShortName": "openssl", "dateReserved": "2026-08-18T09:34:32.659Z", "datePublished": "2026-08-25T13:00:25.067Z", "dateUpdated": "2026-08-25T13:00:25.067Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "OpenSSL", "vendor": "OpenSSL", "versions": [{"lessThan": "4.0.2", "status": "affected", "version": "4.0.0", "versionType": "semver"}, {"lessThan": "3.6.4", "status": "affected", "version": "3.6.0", "versionType": "semver"}, {"lessThan": "3.5.8", "status": "affected", "version": "3.5.0", "versionType": "semver"}, {"lessThan": "3.4.7", "status": "affected", "version": "3.4.0", "versionType": "semver"}, {"lessThan": "3.0.22", "status": "affected", "version": "3.0.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Billy Brumley (Rochester Institute of Technology)"}, {"lang": "en", "type": "remediation developer", "value": "Billy Brumley (Rochester Institute of Technology)"}], "datePublic": "2026-08-25T15:57:42.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty<br>ciphertext can report success without verifying the supplied authentication<br>tag when the operation is finalized by calling the EVP_Cipher() function.<br><br>Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and<br>expecting the call to check the AEAD tag may accept forged messages.<br><br>CWE: CWE-354 (Improper Validation of Integrity Check Value)<br><br>Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one<br>shot encryption and decryption call. It also verifies the AEAD tag after the<br>decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers<br>it skipped the AEAD tag verification when an empty ciphertext was passed to<br>the function. The callers of this function might believe that a successful<br>return indicates a valid AEAD tag for these ciphers, even when that has not<br>truly been validated in this case.<br><br>FIPS impact: no<br>The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE<br>as the affected algorithms are not FIPS approved and thus not implemented<br>in the FIPS module."}], "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."}], "metrics": [{"format": "other", "other": {"content": {"text": "Low"}, "type": "https://openssl-library.org/policies/general/security-policy/"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-354", "description": "Improper Validation of Integrity Check Value", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", "shortName": "openssl", "dateUpdated": "2026-08-25T13:00:25.067Z"}, "references": [{"name": "OpenSSL Advisory", "tags": ["vendor-advisory"], "url": "https://openssl-library.org/news/secadv/20260825.txt"}, {"name": "4.0.2 git commit", "tags": ["patch"], "url": "https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a"}, {"name": "3.6.4 git commit", "tags": ["patch"], "url": "https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b"}, {"name": "3.5.8 git commit", "tags": ["patch"], "url": "https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34"}, {"name": "3.4.7 git commit", "tags": ["patch"], "url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"}, {"name": "3.0.22 git commit", "tags": ["patch"], "url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"}], "source": {"discovery": "UNKNOWN"}, "title": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()", "x_generator": {"engine": "Vulnogram 0.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "OpenSSL", "vendor": "OpenSSL", "versions": [{"lessThan": "4.0.2", "status": "affected", "version": "4.0.0", "versionType": "semver"}, {"lessThan": "3.6.4", "status": "affected", "version": "3.6.0", "versionType": "semver"}, {"lessThan": "3.5.8", "status": "affected", "version": "3.5.0", "versionType": "semver"}, {"lessThan": "3.4.7", "status": "affected", "version": "3.4.0", "versionType": "semver"}, {"lessThan": "3.0.22", "status": "affected", "version": "3.0.0", "versionType": "semver"}]}], "source": "openssl-security@openssl.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."}], "id": "CVE-2026-75803", "lastModified": "2026-08-25T13:19:29.570", "metrics": {}, "published": "2026-08-25T13:19:29.570", "references": [{"source": "openssl-security@openssl.org", "url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"}, {"source": "openssl-security@openssl.org", "url": "https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b"}, {"source": "openssl-security@openssl.org", "url": "https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a"}, {"source": "openssl-security@openssl.org", "url": "https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34"}, {"source": "openssl-security@openssl.org", "url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"}, {"source": "openssl-security@openssl.org", "url": "https://openssl-library.org/news/secadv/20260825.txt"}], "sourceIdentifier": "openssl-security@openssl.org", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-354"}], "source": "openssl-security@openssl.org", "type": "Secondary"}]}

{}

{}