Threats tagged 'ghsa-8mfx-6cpc-cr47'

An out-of-bounds write vulnerability exists in the Renesas TSIP TLS 1.3 transcript buffer within the tsip_StoreMessage() function of wolfSSL. The function does not return after detecting capacity overflow, causing a buffer overflow when processing large TLS 1.3 handshake messages. This can corrupt adjacent heap memory and potentially cause a remote denial of service. The issue affects only wolfSSL builds using the Renesas TSIP TLS port as a TLS 1.3 client on Renesas MCUs with TSIP hardware enabled. Other configurations are not affected.