This vulnerability involves an out-of-bounds write (CWE-787) in the SetSuitesHashSigAlgo function triggered by an oversized signature algorithms list. The issue permits writing beyond the allocated buffer, potentially causing memory corruption. The CVSS 4.0 vector indicates low severity with local attack vector, high attack complexity, and partial impact on integrity and availability. No patch or remediation details are available, and no exploits have been observed in the wild.

The vulnerability allows an attacker with local access and partial user interaction to cause a write beyond buffer boundaries, which may result in memory corruption. The impact is limited to low severity with partial integrity and availability effects. There is no indication of remote exploitation or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is available at this time.