4 matches found
CVE-2026-89319
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...
CVE-2026-89319 JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...
CVE-2026-89319
The JweDirectDecryptorBlock.Decrypt function is vulnerable to a flaw where it reads a 64-bit plaintext length from the _thales_aad protected-header field without performing any validation. This lack of input validation leads to three distinct failure states: a truncated field causes a binary.BigE...
EUVD-2026-108652
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...