Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h957-386q-gm5j

Опубликовано: 22 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 8.2

Описание

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

EPSS

Процентиль: 4%
0.00018
Низкий

2.1 Low

CVSS4

8.2 High

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVSS3: 8.2
ubuntu
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

CVSS3: 8.2
nvd
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

msrc
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

CVSS3: 8.2
debian
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 ...

EPSS

Процентиль: 4%
0.00018
Низкий

2.1 Low

CVSS4

8.2 High

CVSS3

Дефекты

CWE-191