Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/22 4:11 p.m.37 views

GHSA-423W-P2W9-R7VQ AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure

Summary In the AES GCM implementation of decryptinplacedetached, the decrypted ciphertext i.e. the correct plaintext is exposed even if tag verification fails. Impact If a program using the aes-gcm crate's decryptinplace APIs accesses the buffer after decryption failure, it will contain a...

4.7CVSS5AI score0.00262EPSS
SaveExploits1References8
Rows per page
Query Builder