CVE-2023-26084
—CVSS 3.1
3.7 low
EPSS
<1%p30
Published
()
Modified
Description
The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable.
- Vendors
- arm
- Products
- aarch64cryptolib
- Weakness
- CWE-665
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.