Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.
Metrics
Affected Vendors & Products
References
History
No history.
![cve-icon](/static/img/cve-icon.png)
Status: PUBLISHED
Assigner: mitre
Published: 2016-05-13T14:00:00
Updated: 2024-08-05T23:24:48.636Z
Reserved: 2016-01-29T00:00:00
Link: CVE-2016-2195
![cve-icon](/static/img/cisa-icon.png)
No data.
![cve-icon](/static/img/nvd-icon.png)
Status : Modified
Published: 2016-05-13T14:59:08.727
Modified: 2024-11-21T02:48:00.930
Link: CVE-2016-2195
![cve-icon](/static/img/redhat-icon.png)
No data.