CVE-2026-14355

🔶 medium

Summary

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort.

CVSS Score

5.6

Medium

EPSS Score

0.3

Exploit Probability

Published Date

2026-07-03

First Seen: 2026-07-04

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 31.6% of all 350,976 vulnerabilities in our database.

#239,915

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Jul 6, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Oleg Baturin David CARLIER (remediation developer)

SSVC data provided by CISA

Last Modified 2026-07-08

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE IDs (Weakness Types)

CWE-122

📦 Affected Products 5

Vendor	Product	Status	Affected Versions
debian	debian_linux	Affected	v12.0
php	php	Affected	> 8.2.0 < 8.2.32
php	php	Affected	> 8.3.0 < 8.3.32
php	php	Affected	> 8.4.0 < 8.4.23
php	php	Affected	> 8.5.0 < 8.5.8

🔗 References 2

https://github.com/php/php-src/security/advisories/G...

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2026/07...

Mailing List Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-12996	⚠️ high	8.1	0.5	A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to poten...	2026-07-30
CVE-2026-17543	⛔ critical	9.8	0.5	Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions ...	2026-07-30
CVE-2026-17544	⛔ critical	9.8	0.5	Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions...	2026-07-30
CVE-2026-7260	🔶 medium	5.5	0.2	Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP ...	2026-07-30
CVE-2026-56968	ℹ️ low	3.7	0.3	GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could...	2026-06-23
CVE-2026-49975	⚠️ high	7.5	31.0	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service vi...	2026-06-08

These CVEs affect the same products