ID CVE-2019-17362
Summary In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
Last major update 08-10-2019 - 21:15
Published 08-10-2019 - 21:15
Last modified 09-10-2019 - 08:35
Back to Top