SA-2026-022 - OpenSSL PKCS#12 BMPString Corruption (CVE-2025-69419)
Summary Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write befo...