CVE-2026-54876: OpenSSL: Client-Side Memory Leak in OCSP Response Checking
oss-sec: CVE-2026-54876: OpenSSL: Client-Side Memory Leak in OCSP Response Checking
Posted by Norbert Pócs on Aug 05 OpenSSL Security Advisory [5th August 2026] =========================================== Client-Side Memory Leak in OCSP Response Checking (CVE-2026-54876) ================================================================== Severity: Low Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An...
seclists.org