GitHub Advisoryadvisory · crates.io

GHSA-9p8q-j6q5-mjw8 Buffer Overflow in galois_2p8

CRITICAL Published 2022-02-15 Modified 2022-02-25 Official page ↗

Aliases: CVE-2022-24988
Ecosystem: crates.io
Packages: galois_2p8
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-120, CWE-193
Reviewed: 2022-02-25

Affected packages

• crates.io galois_2p8: < 0.1.2 → fixed in 0.1.2

Description

In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector.

Related

Alias · CVE (1)

CVE-2022-24988 In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector. vulnerability

Weakness · CWE (2)

CWE-120 Buffer Copy without Checking Size of Input weakness
CWE-193 Off-by-one Error weakness

References