CVE-2026-81693
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 27, 2026
Vendor
unknown
Description
openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions.