diff --git a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt index aa3b5811d8..490fd2ed6f 100644 --- a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt +++ b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt @@ -1,7 +1,6 @@ Security - * Possible buffer overflow in mbedtls_ecdh_calc_secret(): when the provided - output buffer is too small, sometimes (depending on the value of the - computed shared secret), the function would not return an error as it - should, but instead write past the end of the buffer, with consequences - that may range up to arbitrary code execution depending on what follows the - buffer. Reported by Eva Crystal (0xiviel) from XSource Security. + * Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the + provided output buffer is too small, sometimes (depending on the value of + the computed shared secret), the function would not return an error as it + should, but instead write past the end of the buffer. Reported by Eva + Crystal (0xiviel) from XSource Security. CVE-2026-35336