Out-of-bounds read In bouncycastle
Description
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version |
|---|---|---|
 debian 11 | ||
debian 13 | ||
debian 12 | ||
debian 14 |
Aliases
1. 2. 3. 4. 5.