From 070ba17a8afd02df563d12fdb8d478cbfb5d39bf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Mon, 30 Mar 2026 11:29:43 +0200 Subject: [PATCH] ECDH: Add ChangeLog for legacy buffer overflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Manuel Pégourié-Gonnard --- ChangeLog.d/ecdh-legacy-buffer-overflow.txt | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 ChangeLog.d/ecdh-legacy-buffer-overflow.txt diff --git a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt new file mode 100644 index 0000000000..aa3b5811d8 --- /dev/null +++ b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt @@ -0,0 +1,7 @@ +Security + * Possible buffer overflow in mbedtls_ecdh_calc_secret(): when the provided + output buffer is too small, sometimes (depending on the value of the + computed shared secret), the function would not return an error as it + should, but instead write past the end of the buffer, with consequences + that may range up to arbitrary code execution depending on what follows the + buffer. Reported by Eva Crystal (0xiviel) from XSource Security.