OpenSSL X.509 heap buffer overflow (CVE-2026-31789)

Summary

Converting an exceptionally large OCTET STRING to hexadecimal may overflow a heap buffer.

Vulnerability ID	Vulnerability Overview
CVE-2026-31789	When an application prints or logs a crafted X.509 certificate with an excessively large OCTET STRING (over 1 GB), a multiplication overflow occurs on 32-bit systems, resulting in the allocation of a smaller buffer and subsequent heap corruption.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06

TS5020 / TS3030
Fixed in firmware version 3.16

 

Back to Security Notices

Date	Description
09/02/2026	Initial release
10/14/2026	Update

Back to Security Notices