11 matches found
EUVD-2025-4085
Malicious code in bioql PyPI...
GHSA-29C6-3HCJ-89CF go-crypto-winnative BCryptGenerateSymmetricKey memory leak
Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...
go-crypto-winnative BCryptGenerateSymmetricKey memory leak
Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...
CVE-2025-25199
go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...
AZL-98937 CVE-2025-25199 affecting package golang 1.27.1-1
go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...
CVE-2025-25199
go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to "cng.TLS1PRF" don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...
Microsoft go-crypto-winnative 安全漏洞
Microsoft go-crypto-winnative is a library from Microsoft Corporation USA. A security vulnerability exists in go-crypto-winnative, which stems from a call to cng.TLS1PRF that does not release the key handle, creating a small memory leak each time...
CVE-2018-4301
This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...
CVE-2018-4301
This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...
CVE-2018-4301
A stack-based buffer overflow vulnerability exists in the GemaltoKeyHandle.cpp file within the Smart Card Services open-source project. This memory corruption flaw, identified as CVE-2018-4301 , can be exploited by attackers with local access to the smartcard driver. Successful exploitation may l...
