{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-75803",
        "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "state": "PUBLISHED",
        "assignerShortName": "openssl",
        "dateReserved": "2026-08-18T09:34:32.659Z",
        "datePublished": "2026-08-25T13:00:25.067Z",
        "dateUpdated": "2026-08-25T13:00:25.067Z"
    },
    "containers": {
        "cna": {
            "affected": [
                {
                    "defaultStatus": "unaffected",
                    "product": "OpenSSL",
                    "vendor": "OpenSSL",
                    "versions": [
                        {
                            "lessThan": "4.0.2",
                            "status": "affected",
                            "version": "4.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThan": "3.6.4",
                            "status": "affected",
                            "version": "3.6.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThan": "3.5.8",
                            "status": "affected",
                            "version": "3.5.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThan": "3.4.7",
                            "status": "affected",
                            "version": "3.4.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThan": "3.0.22",
                            "status": "affected",
                            "version": "3.0.0",
                            "versionType": "semver"
                        }
                    ]
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "type": "reporter",
                    "value": "Billy Brumley (Rochester Institute of Technology)"
                },
                {
                    "lang": "en",
                    "type": "remediation developer",
                    "value": "Billy Brumley (Rochester Institute of Technology)"
                }
            ],
            "datePublic": "2026-08-25T15:57:42.000Z",
            "descriptions": [
                {
                    "lang": "en",
                    "supportingMedia": [
                        {
                            "base64": false,
                            "type": "text/html",
                            "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty<br>ciphertext can report success without verifying the supplied authentication<br>tag when the operation is finalized by calling the EVP_Cipher() function.<br><br>Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and<br>expecting the call to check the AEAD tag may accept forged messages.<br><br>CWE: CWE-354 (Improper Validation of Integrity Check Value)<br><br>Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one<br>shot encryption and decryption call. It also verifies the AEAD tag after the<br>decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers<br>it skipped the AEAD tag verification when an empty ciphertext was passed to<br>the function. The callers of this function might believe that a successful<br>return indicates a valid AEAD tag for these ciphers, even when that has not<br>truly been validated in this case.<br><br>FIPS impact: no<br>The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE<br>as the affected algorithms are not FIPS approved and thus not implemented<br>in the FIPS module."
                        }
                    ],
                    "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."
                }
            ],
            "metrics": [
                {
                    "format": "other",
                    "other": {
                        "content": {
                            "text": "Low"
                        },
                        "type": "https://openssl-library.org/policies/general/security-policy/"
                    }
                }
            ],
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "cweId": "CWE-354",
                            "description": "Improper Validation of Integrity Check Value",
                            "lang": "en",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "providerMetadata": {
                "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
                "shortName": "openssl",
                "dateUpdated": "2026-08-25T13:00:25.067Z"
            },
            "references": [
                {
                    "name": "OpenSSL Advisory",
                    "tags": [
                        "vendor-advisory"
                    ],
                    "url": "https://openssl-library.org/news/secadv/20260825.txt"
                },
                {
                    "name": "4.0.2 git commit",
                    "tags": [
                        "patch"
                    ],
                    "url": "https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a"
                },
                {
                    "name": "3.6.4 git commit",
                    "tags": [
                        "patch"
                    ],
                    "url": "https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b"
                },
                {
                    "name": "3.5.8 git commit",
                    "tags": [
                        "patch"
                    ],
                    "url": "https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34"
                },
                {
                    "name": "3.4.7 git commit",
                    "tags": [
                        "patch"
                    ],
                    "url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
                },
                {
                    "name": "3.0.22 git commit",
                    "tags": [
                        "patch"
                    ],
                    "url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "title": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()",
            "x_generator": {
                "engine": "Vulnogram 0.2.0"
            }
        }
    }
}