PT-2023-25978

Name of the Vulnerable Software and Affected Versions OpenIDC/cjose versions prior to 0.6.2.2 Description The AES GCM decryption routine in OpenIDC/cjose incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE, instead of the fixed length of 16 octets specified in t...

CVE-2023-37464: Use of a Broken or Risky Cryptographic Algorithm

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. The AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. The spec says that a fixed length of 16 octets must be applied. Therefore this bug...