Lucene search
+L

645 matches found

RustSec
RustSec
added 5 days ago7 views

NIP-04 parsing amplifies malformed ciphertext memory use

The NIP-04 decryption parser split attacker-controlled content on every ?iv= separator and collected all resulting segments before checking that the message had the expected two parts. It also Base64-decoded the complete IV text before checking that it represented the required 16-byte AES-CBC IV....

5.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder