TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-04-02 18:46:06 +02:00
Code Issues Packages Projects Releases Wiki Activity

Updated Changelog

Browse Source 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
This commit is contained in:
Minos Galanakis
2026-03-05 10:40:08 +00:00
parent a397bb13a3
commit e54d769fe8
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
ChangeLog.d/fix-ccm-finish.txt
View File

@@ -1,3 +1,6 @@
Bugfix
* Add tag length validation in mbedtls_ccm_finish() to reject lengths
that are invalid or differ from the negotiated tag length.
Security
* Add tag length validation in mbedtls_ccm_finish() to prevent
out-of-bounds reads and mitigate potential application buffer
overflows where applications relied on the library to enforce
tag length constraints.