Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AArch64cryptolib 路径遍历漏洞
Vulnerability Description
AArch64cryptolib是Arm Software开源的一个加密原语的从头开始实现。 AArch64cryptolib 20230220 之前版本存在路径遍历漏洞，该漏洞源于armv8_dec_aes_gcm_full() API无法验证AES-GCM保护数据的认证标签，导致中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A