Threats tagged 'ghsa-8f95-v3jq-cj86'

A heap buffer overflow vulnerability exists in pymonocypher's argon2i_32 function due to insufficient checking of the nb_blocks buffer size. If the buffer provided is too small, the function may write beyond its allocated memory, potentially corrupting the heap. This vulnerability is fixed in version 4.0.2.8 by verifying the buffer size before use. Users should upgrade to version 4.0.2.8 or later or ensure the nb_blocks buffer is correctly sized to mitigate the risk.