Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-11931

Опубликовано: 21 нояб. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.2

Описание

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

ignored

end of life, was needs-triage
questing

needs-triage

Показывать по

EPSS

Процентиль: 17%
0.00053
Низкий

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 8.2
nvd
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

msrc
2 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

CVSS3: 8.2
debian
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 ...

CVSS3: 8.2
github
3 месяца назад

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

EPSS

Процентиль: 17%
0.00053
Низкий

8.2 High

CVSS3