Description

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).

Related CPE's

a

nasa

cryptolib

1.3.0

Vulnerable

References

https://github.com/nasa/CryptoLib/issues/268

Issue Tracking

https://visionspace.com/crashing-cryptolib/

ExploitTechnical Description

Weaknesses

[email protected]

Primary
CWE-125

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-09-27T15:15:14.907

2 weeks ago

Last modified

2024-10-07T14:27:42.757

5 days ago