Threats tagged 'ghsa-qv62-qmw8-96h9'

A vulnerability in the libkcapi library affects one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as CTR or CBC. The flaw involves improper reuse of the Initialization Vector (IV) for each internal data chunk, weakening data confidentiality and potentially affecting data integrity. Multiple versions of libkcapi are impacted. No official patch fix is currently available, but mitigation involves avoiding one-shot symmetric cipher APIs for large inputs and using streaming interfaces instead.