mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-07-30 08:16:38 +08:00
a798b5804e
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com> Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
7 lines
342 B
Plaintext
7 lines
342 B
Plaintext
Security
|
|
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing
|
|
an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The
|
|
function now resets the context after freeing it, ensuring stale
|
|
signed_data.signers.next pointers cannot be walked by a later free
|
|
operation. CVE-2026-50579
|