CVE-2020-25023

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25023

Noise-Java contains an out-of-bounds access vulnerability in AESGCMOnCtrCipherState.encryptWithAd() (through 2020-08-27). The issue stems from incomplete/missing boundary checks, risking out-of-bounds reads/writes for large plaintext offsets, negative ciphertext offsets, or negative lengths. Docu...