CVE-2022-3602

score

<0.1

cvss

7.5

epss

90.8%

published

2022-11-01

kev added

—

first seen

2026-10-21

OpenSSL versions 3.0.0 to 3.0.6 contain a buffer overrun caused by name constraint checking in X.509 certificate verification, letting attackers cause a crash or potentially execute remote code, exploit requires crafting malicious email address and either a CA signed the certificate or verification continues despite failure.