UNKNOWN PyPI
CVE-2026-81720
PYSEC-2026-3965 · CVE-2026-81720 · GHSA-783h-8q2f-f762
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.
Ready to move
Start Securing
Free, no credit card | First findings in minutes