8 matches found
CVE-2026-103603
Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...
CVE-2026-103603
In Legion of the Bouncy Castle Inc. bc-csharp before version 2.7.0 , a memory allocation vulnerability exists in the HSS/LMS signature code (HssPublicKeyParameters , HssSignature ). An unauthenticated remote attacker can trigger a denial of service via memory exhaustion by providing an HSS public...
CVE-2026-103603 Unbounded HSS public key level count allows huge array allocation during signature verification
Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...
CVE-2026-103603: Memory Allocation with Excessive Size Value
Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...
CVE-2025-49600
A flaw was found in mbedtls. The mbedtlslmsverify function may accept forged Leighton-Micali signatures when hash computation fails and internal error conditions are not properly checked. This flaw allows an attacker with physical access to create invalid signatures. This issue occurs because...
CVE-2025-49600
In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...
CVE-2025-49600: Missing Cryptographic Step
In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...
CVE-2025-49600
In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...