CVE-2023-53159: Sfackler OpenSSL

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Affected products

• Sfackler OpenSSL: before 0.10.55 (fixed in 0.10.55)

Published 2025-07-28. Last modified 2026-09-17.