CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, при специфични условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim's CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim's CN length. The first N bytes of the attacker's CN are the victim's identity. After parsing, the attacker's certificate has an identical CN to the victim's — enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1.
Засегнати продукти
- smuellerDD leancrypto: < 1.7.1
Вид слабост
История
- 2 април 2026 Публикувано
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-34610
- https://nvd.nist.gov/vuln/detail/CVE-2026-34610
- https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr
- https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a
- https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1