CVE-2024-27232

In asn1ecpkeyparse of asn1common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27232

The OpenSSL library (specifically in asn1_common.c ) contains a vulnerability in the asn1_ec_pkey_parse function caused by a missing null check. This flaw can lead to an out-of-bounds (OOB) read , potentially resulting in local information disclosure without requiring additional execution privile...