Nicolas Mora

**Name of the Vulnerable Software and Affected Versions** Glewlwyd SSO server versions 2.5.3 and earlier **Description** The issue is related to a buffer overflow that occurs during FIDO2 signature validation in webauthn registration. This happens in the scheme/webauthn.c file of the Glewlwyd SSO server. **Recommendations** For Glewlwyd SSO server versions 2.5.3 and earlier, update to a version that fixes the buffer overflow issue in scheme/webauthn.c during FIDO2 signature validation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.