PT-2026-29590

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 4.0.1 TF-PSA-Crypto versions prior to 1.0.1 Description A compiler-induced timing side channel exists in RSA and CBC/ECB decryption. This issue occurs specifically when using the select-optimize feature of the LLVM...

PT-2023-35629 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the javax.crypto.spec.SecretKeySpec constructor, which is called by org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock. This issue ...