Skip to content
Sign in
7.4 High

CVE-2026-4428 A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly…

Description

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.

Affected products and versions

Product Affected versions Fixed in
AWS-LC 1.24 1.24.0 → < 1.71.0 1.71.0
AWS-LC-FIPS 3.0 3.0.0 → < 3.3.0 3.3.0

Other CVEs of AWS-LC

The 4 CVEs of AWS-LC →
CVE-2026-3338 Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature… 7.5 High CVE-2026-3337 Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine… 5.9 Medium CVE-2026-3336 Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain… 7.5 High
Track this CVE