{"schema_version":"1.9.0","id":"CVE-2025-69418","published":"2026-01-27T16:01:23.986Z","modified":"2026-08-12T15:14:55.929662Z","related":["ALSA-2026:1472","ALSA-2026:1473","CGA-jw8r-q3r6-737x","SUSE-SU-2026:0309-1","SUSE-SU-2026:0310-1","SUSE-SU-2026:0311-1","SUSE-SU-2026:0312-1","SUSE-SU-2026:0331-1","SUSE-SU-2026:0343-1","SUSE-SU-2026:0346-1","SUSE-SU-2026:0358-1","SUSE-SU-2026:0359-1","SUSE-SU-2026:0360-1","SUSE-SU-2026:20211-1","SUSE-SU-2026:20223-1","SUSE-SU-2026:20349-1","SUSE-SU-2026:20373-1","openSUSE-SU-2026:10237-1","openSUSE-SU-2026:20152-1"],"summary":"Unauthenticated/unencrypted trailing bytes with low-level OCB function calls","details":"Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"fixed":"a22063cd69a077cc68bb4c10e9f351f75899b194"},{"introduced":"4cb31128b5790819dfeea2739fbde265f71a10a2"},{"fixed":"4601ff25acd6c2fe58a8bfe241e6c470e27b8074"},{"introduced":"98acb6b02839c609ef5b837794e08d906d965335"},{"fixed":"565bdcc41bbf89fcbaf962636469332689f0c9fd"},{"introduced":"636dfadc70ce26f2473870570bfd9ec352806b1d"},{"fixed":"67b5686b4419b4cb8caa502711c41815f5279751"},{"introduced":"7b371d80d959ec9ab4139d09d78e83c090de9779"},{"fixed":"c9a9e5b10105ad850b6e4d1122c645c67767c341"},{"fixed":"372fc5c77529695b05b4f5b5187691a57ef5dffc"},{"fixed":"4016975d4469cd6b94927c607f7c511385f928d8"},{"fixed":"52d23c86a54adab5ee9f80e48b242b52c4cc2347"},{"fixed":"a7589230356d908c0eca4b969ec4f62106f4f5ae"},{"fixed":"ed40856d7d4ba6cb42779b6770666a65f19cb977"}],"database_specific":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.1.1"},{"fixed":"1.1.1ze"},{"introduced":"3.0.0"},{"fixed":"3.0.19"},{"introduced":"3.3.0"},{"fixed":"3.3.6"},{"introduced":"3.4.0"},{"fixed":"3.4.4"},{"introduced":"3.5.0"},{"fixed":"3.5.5"},{"introduced":"3.6.0"},{"fixed":"3.6.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["3.4-POST-CLANG-FORMAT-WEBKIT","3.0-POST-CLANG-FORMAT-WEBKIT","3.4-PRE-CLANG-FORMAT-WEBKIT","3.3-POST-CLANG-FORMAT-WEBKIT","3.5-POST-CLANG-FORMAT-WEBKIT","3.0-PRE-CLANG-FORMAT-WEBKIT","3.3-PRE-CLANG-FORMAT-WEBKIT","3.5-PRE-CLANG-FORMAT-WEBKIT","3.6-POST-CLANG-FORMAT-WEBKIT","3.6-PRE-CLANG-FORMAT-WEBKIT","openssl-3.6.0","openssl-3.0.18","openssl-3.3.5","openssl-3.4.3","openssl-3.5.4","openssl-3.5.3","openssl-3.5.2","openssl-3.0.17","openssl-3.3.4","openssl-3.4.2","openssl-3.5.1","openssl-3.5.0","openssl-3.0.16","openssl-3.3.3","openssl-3.4.1","openssl-3.4.0","openssl-3.0.15","openssl-3.3.2","openssl-3.0.14","openssl-3.3.1","openssl-3.3.0","openssl-3.0.13","openssl-3.0.12","openssl-3.0.11","openssl-3.0.10","openssl-3.0.9","openssl-3.0.8","openssl-3.0.7","openssl-3.0.6","openssl-3.0.5","openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69418.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"185445785273483749724984833071102767629","length":1702},"id":"CVE-2025-69418-08832902","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_decrypt"}},{"deprecated":false,"digest":{"function_hash":"185445785273483749724984833071102767629","length":1702},"id":"CVE-2025-69418-1bda333c","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_decrypt"}},{"deprecated":false,"digest":{"function_hash":"67874926728490549484321146671346537109","length":1708},"id":"CVE-2025-69418-527f5c28","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_encrypt"}},{"deprecated":false,"digest":{"function_hash":"185445785273483749724984833071102767629","length":1702},"id":"CVE-2025-69418-5c24e38a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_decrypt"}},{"deprecated":false,"digest":{"function_hash":"67874926728490549484321146671346537109","length":1708},"id":"CVE-2025-69418-5f855e82","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_encrypt"}},{"deprecated":false,"digest":{"function_hash":"185445785273483749724984833071102767629","length":1702},"id":"CVE-2025-69418-7d9a390a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_decrypt"}},{"deprecated":false,"digest":{"function_hash":"67874926728490549484321146671346537109","length":1708},"id":"CVE-2025-69418-8228622a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_encrypt"}},{"deprecated":false,"digest":{"line_hashes":["219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","209781887423790042939763076475837683439","292894951856751270551239781398053681932","329823596363538096967543096246007581368","214407332637080168111808823571239657618","219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","59921997238140753290980657393750528770","135778423311849627130467981960244066007","49532393773878600690299702915211731069","316169392909083908323761348185442938826"],"threshold":0.9},"id":"CVE-2025-69418-89e7734a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977","target":{"file":"crypto/modes/ocb128.c"}},{"deprecated":false,"digest":{"line_hashes":["219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","209781887423790042939763076475837683439","292894951856751270551239781398053681932","329823596363538096967543096246007581368","214407332637080168111808823571239657618","219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","59921997238140753290980657393750528770","135778423311849627130467981960244066007","49532393773878600690299702915211731069","316169392909083908323761348185442938826"],"threshold":0.9},"id":"CVE-2025-69418-a4b396e5","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347","target":{"file":"crypto/modes/ocb128.c"}},{"deprecated":false,"digest":{"line_hashes":["219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","209781887423790042939763076475837683439","292894951856751270551239781398053681932","329823596363538096967543096246007581368","214407332637080168111808823571239657618","219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","59921997238140753290980657393750528770","135778423311849627130467981960244066007","49532393773878600690299702915211731069","316169392909083908323761348185442938826"],"threshold":0.9},"id":"CVE-2025-69418-b8067e20","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae","target":{"file":"crypto/modes/ocb128.c"}},{"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9},"id":"CVE-2025-69418-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"}},{"deprecated":false,"digest":{"function_hash":"67874926728490549484321146671346537109","length":1708},"id":"CVE-2025-69418-cb957352","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_encrypt"}},{"deprecated":false,"digest":{"line_hashes":["219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","209781887423790042939763076475837683439","292894951856751270551239781398053681932","329823596363538096967543096246007581368","214407332637080168111808823571239657618","219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","59921997238140753290980657393750528770","135778423311849627130467981960244066007","49532393773878600690299702915211731069","316169392909083908323761348185442938826"],"threshold":0.9},"id":"CVE-2025-69418-d0e93e49","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8","target":{"file":"crypto/modes/ocb128.c"}},{"deprecated":false,"digest":{"line_hashes":["219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","209781887423790042939763076475837683439","292894951856751270551239781398053681932","329823596363538096967543096246007581368","214407332637080168111808823571239657618","219312396776272628301550969147505933452","36863883106600888632231627357013139699","311903940445207926165782571512644788270","321969164060885062804476022880404654026","59921997238140753290980657393750528770","135778423311849627130467981960244066007","49532393773878600690299702915211731069","316169392909083908323761348185442938826"],"threshold":0.9},"id":"CVE-2025-69418-e518bb26","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc","target":{"file":"crypto/modes/ocb128.c"}},{"deprecated":false,"digest":{"function_hash":"185445785273483749724984833071102767629","length":1702},"id":"CVE-2025-69418-e53d9018","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_decrypt"}},{"deprecated":false,"digest":{"function_hash":"67874926728490549484321146671346537109","length":1708},"id":"CVE-2025-69418-f2f2cfec","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347","target":{"file":"crypto/modes/ocb128.c","function":"CRYPTO_ocb128_encrypt"}}],"vanir_signatures_modified":"2026-08-12T15:14:55Z"}}],"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69418.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69418"},{"type":"ADVISORY","url":"https://openssl-library.org/news/secadv/20260127.txt"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977"}],"database_specific":{"cna_assigner":"openssl","cwe_ids":["CWE-325"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69418.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}