CVE-2025-9230

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.

• CWE-125
• CWE-787

• https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45Patch
• https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280Patch
• https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2defPatch
• https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfdPatch
• https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482Patch
• https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3Permissions Required
• https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8baPermissions Required
• https://openssl-library.org/news/secadv/20250930.txtVendor Advisory
• https://www.openwall.com/lists/oss-security/2025/09/30/5Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/10/msg00001.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-032379.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-089022.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-253495.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-485750.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-585531.htmlThird Party Advisory

Published

Sep 30, 2025

Last Modified

Nov 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9223Zohocorp ManageEngine Applications Manager versions 178100 a…8.8
• CVE-2025-9225Stored cross-site scripting (XSS) in the web interface of Mi…5.5
• CVE-2025-9226Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUti…4.6
• CVE-2025-9227Zohocorp ManageEngine OpManager versions 128609 and below ar…6.5
• CVE-2025-9228MiR software versions prior to version 3.0.0 have insufficie…4.3
• CVE-2025-9229Information disclosure vulnerability in error handling in Mi…5.3
• CVE-2025-9231Issue summary: A timing side-channel which could potentially…5.9
• CVE-2025-9232Issue summary: An application using the OpenSSL HTTP client …5.9
• CVE-2025-9233A security vulnerability has been detected in Scada-LTS up t…5.4
• CVE-2025-9234A vulnerability was detected in Scada-LTS up to 2.7.8.1. The…5.4
• CVE-2025-9235A flaw has been found in Scada-LTS up to 2.7.8.1. The impact…5.4
• CVE-2025-9236A vulnerability has been found in Portabilis i-Educar up to …8.8