Skip to content
Threat Feed

Product

Libcrux-Chacha20poly1305 (< 0.0.8)

1 brief RSS
medium advisory

libcrux-chacha20poly1305: Potential Panic on Overlong Ciphertext Buffer

An application that passes an overlong ciphertext buffer to `libcrux_chacha20poly1305::encrypt` or `libcrux_chacha20poly1305::xchacha20_poly1305::encrypt` can experience a panic, leading to a crash if the buffer length is attacker-controlled, affecting libcrux-chacha20poly1305 versions prior to 0.0.8.

libcrux-chacha20poly1305 denial-of-service availability
1t