1 result · Feed
-
Unscored —
Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS
`cryptoki` treated the CKA_ALLOWED_MECHANISMS ulValueLen byte count as a CK_MECHANISM_TYPE element count. A valid nonempty attribute returned through the safe `Session::get_attributes` API could cause construction of an out-of-bounds slice and undefined behav…