CyberRota Analysis
AI-GeneratedA vulnerability exists in the do_sss_aes_gcm_256_op function of crypto-aes.c, where a missing bounds check can lead to an out-of-bounds read, potentially allowing local information disclosure. Exploitation requires system execution privileges but does not necessitate user interaction. Organizations utilizing affected products should prioritize patching this vulnerability to mitigate the risk of sensitive data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.