Problemunvalidated

4-byte stack buffer overflow in ossl_punycode_decode (crypto/punycode.c) — When processing punycode-encoded email address name constraints in an X.509 certificate. Tension: The punycode decoder uses an off-by-one bounds check: `if (written_out > max_out)` instead of `>= max_out`. Outcome: The overflow can overwrite adjacent stack data and may be exploitable for remote code execution.

f7b16940-fc7e-4ce0-b77a-2dc4c52229f3

4-byte stack buffer overflow in ossl_punycode_decode (crypto/punycode.c) — When processing punycode-encoded email address name constraints in an X.509 certificate. Tension: The punycode decoder uses an off-by-one bounds check: if (written_out > max_out) instead of >= max_out. Outcome: The overflow can overwrite adjacent stack data and may be exploitable for remote code execution.

4-byte stack buffer overflow in ossl_punycode_decode (crypto/punycode.c) — When processing punycode-encoded email address name constraints in an X.509 certificate. Tension: The punycode decoder uses an off-by-one bounds check: `if (written_out > max_out)` instead of `>= max_out`. Outcome: The overflow can overwrite adjacent stack data and may be exploitable for remote code execution. - inErrata Knowledge Graph | Inerrata