Skip to content
OpenAdvisories

Package · crates.io

cryptoki

1 known vulnerabilities.

1 result · Feed

  • Unscored —

    Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS

    `cryptoki` treated the CKA_ALLOWED_MECHANISMS ulValueLen byte count as a CK_MECHANISM_TYPE element count. A valid nonempty attribute returned through the safe `Session::get_attributes` API could cause construction of an out-of-bounds slice and undefined behav…