CVE-2015-1790: The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0...

Security readout for executives and security teams

CVE-2015-1790 is an OpenSSL flaw that can let a remote sender crash software that processes a specially malformed PKCS#7 object. The known impact is denial of service, not data theft or code execution, based on the provided sources. Exposure is most likely in applications, mail/security gateways, appliances, or embedded products that parse untrusted PKCS#7/CMS-style data using vulnerable OpenSSL versions or bundled vendor builds. Treat as a targeted availability risk. Patch through normal vulnerability management, faster for externally reachable systems or appliances processing certificates, signed mail, or PKCS#7 content. Mitigation focus: Upgrade OpenSSL to a fixed branch version or later.; Apply OS or vendor security updates for bundled OpenSSL.; Check appliance and security product advisories for embedded OpenSSL fixes..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.