CVE-2026-14355

🔶 medium

Summary

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort.

CVSS Score

5.6

Medium

EPSS Score

0.3

Exploit Probability

Published Date

2026-07-03

First Seen: 2026-07-04

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 32.6% of all 335,187 vulnerabilities in our database.

#226,074

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Jul 6, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Oleg Baturin David CARLIER (remediation developer)

SSVC data provided by CISA

Last Modified 2026-07-08

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE IDs (Weakness Types)

CWE-122

📦 Affected Products 5

Vendor	Product	Status	Affected Versions
debian	debian_linux	Affected	v12.0
php	php	Affected	> 8.2.0 < 8.2.32
php	php	Affected	> 8.3.0 < 8.3.32
php	php	Affected	> 8.4.0 < 8.4.23
php	php	Affected	> 8.5.0 < 8.5.8

🔗 References 2

https://github.com/php/php-src/security/advisories/G...

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2026/07...

Mailing List Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-56968	ℹ️ low	3.7	0.2	GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could...	2026-06-23
CVE-2026-49975	⚠️ high	7.5	11.5	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service vi...	2026-06-08
CVE-2026-46333	⚠️ high	7.1	1.4	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The ...	2026-05-15
CVE-2025-14179	⛔ critical	9.8	0.3	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird ...	2026-05-10
CVE-2026-6722	⛔ critical	9.8	0.7	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extensio...	2026-05-10
CVE-2026-7262	⚠️ high	7.5	0.8	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP serve...	2026-05-10

These CVEs affect the same products