CVE-2025-69421 | OpenSSL up to 3.6.0 PKCS#12 PKCS12_item_decrypt_d2i_ex null pointer dereference

A vulnerability was found in OpenSSL up to 3.6.0. It has been classified as problematic. The affected element is the function PKCS12_item_decrypt_d2i_ex of the component PKCS#12 Handler. The manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2025-69421. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.