CVE-2024-27232

In asn1ecpkeyparse of asn1common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27232

A missing null check in the asn1_ec_pkey_parse function of asn1_common.c leads to a possible out-of-bounds (OOB) read . This vulnerability affects the GSC subcomponent on Google Pixel devices and OpenSSL (affected versions not specified). An attacker could exploit this to cause local information ...