Public Security Advisories
Coordinated vulnerability disclosures from Argus. Findings, impact, and remediation, published in good faith.
On the Silicon Labs Secure Element port, wolfSSL sized an ECC import from the encoded point and selected the curve separately by identifier. A 133-byte point on a P-256 session wrote past the 96-byte key_raw field during certificate processing, before the handshake was authenticated.
// No embargoed advisories.