Sunwoo Lee

**Name of the Vulnerable Software and Affected Versions** OpenSSL (affected versions not specified) **Description** A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address validation is disabled, which can be achieved by using the `SSL LISTENER FLAG NO VALIDATE` flag within the `SSL new listener()` function. A NULL pointer dereference is a condition where the software attempts to read or write to a memory location that is null, typically resulting in the abnormal termination of the process and a Denial of Service. **Recommendations** Avoid using the `SSL LISTENER FLAG NO VALIDATE` flag in the `SSL new listener()` function to ensure client address validation remains enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BC-JAVA versions 1.71 through 1.83 **Description** A covert timing channel exists in the BC-JAVA core modules, specifically associated with the program files FrodoEngine.Java. A covert timing channel is a method of transferring information from one process to another by manipulating the timing of events. **Recommendations** Update to version 1.84.

Name of the Vulnerable Software and Affected Versions DTLS 1.3 (affected versions not specified) Description A heap buffer overflow exists in the processing of DTLS 1.3 ACK messages. A remote attacker can potentially trigger this overflow by sending a crafted DTLS 1.3 ACK message. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions wolfSSL (affected versions not specified) Description A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. The interior padding bytes are not validated. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs. Recommendations Update to version 2.3 or later.

**Name of the Vulnerable Software and Affected Versions** wolfSSL versions (affected versions not specified) **Description** A stack buffer overflow exists in wolfSSL's PKCS7 implementation within the `wc PKCS7 DecryptOri()` function located in wolfcrypt/src/pkcs7.c. The issue occurs when processing a CMS EnvelopedData message with an OtherRecipientInfo (ORI) recipient. The function uses `XMEMCPY` to copy an ASN.1-parsed OID into a fixed 32-byte stack buffer (`oriOID[MAX OID SZ]`) without validating the length of the OID. A crafted CMS EnvelopedData message containing an OID longer than 32 bytes triggers the overflow. Exploitation requires the library to be built with `--enable-pkcs7` and an ORI decrypt callback registered via `wc PKCS7 SetOriDecryptCb()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.