| # OpenSSL Advisory: January 28th, 2022 (BoringSSL Not Affected) |
| |
| OpenSSL have published a [security advisory](https://www.openssl.org/news/secadv/20220128.txt). Here's how it affects BoringSSL: |
| |
| CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL |
| ----|---------|-----------------------|--------------------- |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | Moderate | Not affected, impacted code was removed from BoringSSL in the initial fork |
| |
| [Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity |
| |
| ## CVE-2021-4160 |
| |
| This is the MIPS carry overflow bug previously described in our writeup for [December 14th, 2021](./2021-12-14.md). BoringSSL does not include OpenSSL’s MIPS assembly and is not affected by this bug. |
