{"id":"CVE-2026-53938","summary":"OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)","details":"OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms (`alg` = `A128KW`, `A192KW`, `A256KW`) does not validate the length of the attacker-supplied `encrypted_key` (JWE Encrypted Key) before unwrapping it into a fixed-size, heap-allocated Content Encryption Key (CEK) buffer. A remote, unauthenticated attacker who can submit a crafted JWE to an application that decrypts it with an AES-KW symmetric key can trigger an out-of-bounds heap write, corrupting the heap. This leads at minimum to a crash (denial of service) and, depending on the heap layout and allocator, may be leverageable for further memory-corruption impact. `cjose_jwe_import()` / `cjose_jwe_decrypt()` are pre-authentication entry points: they parse and process fully attacker-controlled input. Upgrade to cjose 0.6.2.5 to receive a patch. If upgrading is not immediately possible, reject the AES Key Wrap algorithms (`A128KW`/`A192KW`/`A256KW`) for untrusted JWEs at the application layer.","aliases":["GHSA-75r7-f5cv-g3wj"],"modified":"2026-09-11T08:19:27.760459Z","published":"2026-09-08T23:25:30.942Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53938.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-122","CWE-787"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53938.json"},{"type":"ADVISORY","url":"https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53938"},{"type":"FIX","url":"https://github.com/OpenIDC/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openidc/cjose","events":[{"introduced":"0"},{"fixed":"8c51d245273583a658f24ef7b08ba22f848a34a5"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"0.6.2.5"}]}}],"versions":["v0.6.2.4","v0.6.2.3","v0.6.2.2","v0.6.2.1","v0.6.2","latest","0.6.1","0.6.0","0.5.1","0.5.0","0.4.1","0.4.0","0.3.0","0.2.0","0.1.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53938.json","vanir_signatures_modified":"2026-09-11T08:19:27Z","vanir_signatures":[{"id":"CVE-2026-53938-200e94d1","signature_type":"Function","signature_version":"v1","source":"https://github.com/openidc/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5","target":{"file":"test/check_jwe.c","function":"cjose_jwe_suite"},"deprecated":false,"digest":{"function_hash":"227948661207335015589447400002653325515","length":1191}},{"deprecated":false,"digest":{"function_hash":"161931903890814537683872254549009418699","length":804},"id":"CVE-2026-53938-452d5e5d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openidc/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5","target":{"file":"src/jwe.c","function":"_cjose_jwe_decrypt_ek_aes_kw"}},{"target":{"file":"test/check_jwe.c"},"deprecated":false,"digest":{"line_hashes":["138060202361687335793341313506705854914","9602786020914180282565357196378149638","314060815727875009379907015202352312800","186027798493512953078842101604966639278","41156694486392137207876770394593059328","33567166454931776584028618299943747805","142102957200804462419006836527052069854"],"threshold":0.9},"id":"CVE-2026-53938-a0b76305","signature_type":"Line","signature_version":"v1","source":"https://github.com/openidc/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5"},{"source":"https://github.com/openidc/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5","target":{"file":"src/jwe.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["35802286180622184793423599462609574801","109949726461053807252393203968222088768","275997964570305028092695272182276930776"]},"id":"CVE-2026-53938-e09779da","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}]}