OSV-2023-1291 Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64979 Crash type: Security exception Crash state: org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...

PT-2023-35635 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the BinaryRC4Decryptor component of Apache POI, specifically in the initCipherForBlock function. This issue is related to the BinaryRC4CipherInputStre clas...

OSV-2023-1266 Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64768 Crash type: Security exception Crash state: java.base/javax.crypto.spec.SecretKeySpec. org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...