Overview
About vulnerability
If a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. For example:
h = Hash(SHA256())
b.update(buf[::-1])
would read past the end of the buffer on Python >3.11
Details
- Affected product:
- cryptography
- Affected packages:
- cryptography @ 45.0.7.post2+tuxcare