Description (CNA)
CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused by an underflow of the integer mlen. This issue has been patched via commit fc6b7e7.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CROSS-signature / CROSS-implementation | affected < fc6b7e78cdf789bb5c395a81dc601356f1383da0 |
CWE
CWE-121, CWE-122
References
- https://github.com/CROSS-signature/CROSS-implementation/security/advisories/GHSA-w72c-hgx8-p7cv
- https://github.com/CROSS-signature/CROSS-implementation/commit/fc6b7e78cdf789bb5c395a81dc601356f1383da0
ADP enrichment
No English description supplied.
No references supplied.