CVE-2025-67897

MEDIUM5.3EPSS 0.17%

Underflow in aes_key_unwrap function

發布日:2025/12/14修改日:2025/12/17
也稱為:GHSA-v6x3-9r38-r27qCGA-9h2q-x62v-rph9RUSTSEC-2025-0136

描述

The `aes_key_unwrap` function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value would be interpreted as a huge allocation. The allocator would then fail to allocate the memory and panic. An attacker could trigger this panic by sending a victim an encrypted message whose PKESK or SKESK packet has been specially modified. When the victim decrypts the message, the program would crash.

受影響套件(3)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

參考連結(8)