OpenSSL 3.0.6 CVE-2022-3602: Stack Buffer Overflow in Punycode Decoder

CVE-2022-3602 is a stack buffer overflow vulnerability in OpenSSL 3.0.0-3.0.6 that occurs when processing X.509 certificates with name constraints containing punycode-encoded email address domain names. The vulnerability is in the ossl_punycode_decode function which has an off-by-one bounds check that allows writing past the end of a 512-element stack-allocated buffer when decoding Unicode codepoints from punycode format.