coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

Improve Changelog

Browse Source 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2026-04-02 09:35:42 +02:00
parent a2ca5fb23a
commit 89aee1e63a
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
ChangeLog.d/ecdh-legacy-buffer-overflow.txt
View File

@ -1,7 +1,6 @@
Security
* Possible buffer overflow in mbedtls_ecdh_calc_secret(): when the provided
output buffer is too small, sometimes (depending on the value of the
computed shared secret), the function would not return an error as it
should, but instead write past the end of the buffer, with consequences
that may range up to arbitrary code execution depending on what follows the
buffer. Reported by Eva Crystal (0xiviel) from XSource Security.
* Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the
provided output buffer is too small, sometimes (depending on the value of
the computed shared secret), the function would not return an error as it
should, but instead write past the end of the buffer. Reported by Eva
Crystal (0xiviel) from XSource Security. CVE-2026-35336