Autonomous System Uncovers Long-Standing OpenSSL Flaws

AISLE discovered and responsibly disclosed 12 vulnerabilities in OpenSSL, spanning multiple subsystems (including CMS AuthEnvelopedData, QUIC, and post-quantum signature handling). The set includes a high-severity stack buffer overflow with potential for remote code execution under specific conditions, a moderate PKCS#12 parameter validation flaw, and several low-severity crashes or memory issues; fixes were applied and six additional issues were remediated prior to any release reaching users.