mbedtls/ChangeLog.d/ecdsa-conversion-overflow.txt
Gilles Peskine a9e7ac9811 Improve description of who is affected
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-06-27 10:59:55 +02:00

7 lines
376 B
Plaintext

Security
* Fix a stack buffer overflow in mbedtls_ecdsa_der_to_raw() and
mbedtls_ecdsa_raw_to_der() when the bits parameter is larger than the
largest supported curve. In some configurations with PSA disabled,
all values of bits are affected. This never happens in internal library
calls, but can affect applications that call these functions directly.