Threats tagged 'ghsa-hvwm-w7rw-23cv'

A Bleichenbacher padding oracle vulnerability exists in wolfSSL's PKCS#7 EnvelopedData decryption when using RSA PKCS#1 v1.5 key transport. The library returned distinguishable error codes depending on whether RSA padding validation failed or the decrypted content was malformed, allowing an attacker to use error responses as a padding oracle to recover the encrypted Content Encryption Key (CEK). The fix involves generating a deterministic pseudo-random fake CEK on padding failure and using constant-time operations to ensure all failure paths produce the same error, preventing information leakage.