Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11931

Опубликовано: 21 нояб. 2025
Источник: nvd
CVSS3: 8.2
EPSS Низкий

Описание

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wolfssl:wolfssl:5.8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00053
Низкий

8.2 High

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVSS3: 8.2
ubuntu
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

msrc
2 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

CVSS3: 8.2
debian
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 ...

CVSS3: 8.2
github
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

EPSS

Процентиль: 17%
0.00053
Низкий

8.2 High

CVSS3

Дефекты

CWE-191