Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-28285

May 14, 2024, 4:13 p.m.

Product(s) Impacted

Crypto++

Description

A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges.

Weaknesses

Date

Published: May 14, 2024, 3:14 p.m.

Last Modified: May 14, 2024, 4:13 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://gist.github.com/ cve@mitre.org