Severity: Unknown
Affected Package: openssl
Summary: out-of-bounds read in HTTP client no_proxy handling
An application using the OpenSSL HTTP client API may trigger an out-of-bounds read if the no_proxy environment variable is set and the host portion of the HTTP URL authority is an IPv6 address, triggering a crash (Denial of Service). Severity: Low (OpenSSL).
No specific recommendations provided.
Aliases: CVE-2025-9232
Published: June 11, 2026
Last Modified: June 11, 2026