Lucene search
+L

1 matches found

OSV
OSV
added 2024/07/17 6:30 p.m.19 views

GHSA-J8CM-G7R6-HFPQ vodozemac's usage of non-constant time base64 decoder could lead to leakage of secret key material

Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and PkDecryption Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. Impa...

6.3CVSS3.4AI score0.00201EPSS
SaveExploits0References7
Rows per page
Query Builder