Threats affecting pkg:github/Gwenhywfar

Gwenhywfar versions 5.14.2 up to but not including 5.14.3 contain a heap use-after-free vulnerability in the GWEN_TLV_Buffer_To_DB() function. This flaw occurs when parsing a nested BER-TLV record with unparseable contents, leading to the freeing of a database node that is still used afterward, causing heap corruption. The vulnerability can be triggered by supplying specially crafted BER-TLV data, such as from a malicious chip card read by libchipcard. A fix is available in version 5.14.3.

Gwenhywfar versions from 4.99.8beta up to but not including 5.14.2 contain a stack-based buffer overflow vulnerability in the GWEN_TLV_Buffer_To_DB() function. This occurs when decoding BER-TLV tags into a fixed 128-byte buffer, allowing an attacker to crash the application by supplying a record with about 127 or more tag continuation bytes or a truncated multi-byte tag. The vulnerability can be triggered, for example, via a malicious chip card's EF_SSD file read by libchipcard's ZKA driver. The issue is fixed in version 5.14.2.