In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-10-09T00:00:00
Updated: 2024-08-05T01:40:15.198Z
Reserved: 2019-10-09T00:00:00
Link: CVE-2019-17362
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-10-09T01:15:10.130
Modified: 2023-12-14T03:15:36.103
Link: CVE-2019-17362
Redhat