Threats tagged 'brew-cryptography-cve-2024-26130'

A NULL pointer dereference vulnerability (CVE-2024-26130) exists in the python-cryptography library's pkcs12.serialize_key_and_certificates function when called with a non-matching certificate and private key along with an hmac_hash override. This flaw can cause a denial of service by crashing applications using the library. The issue affects cryptography versions prior to 50.0.0. Red Hat has released security updates for their python3.12-cryptography packages to address this vulnerability.