Insufficient Length Validation in Yubico libykpiv Affects Sensitive Information Security

CVE-2020-13131

What is CVE-2020-13131?

An issue in Yubico's libykpiv library, specifically in the lib/util.c file, can lead to insecure handling of length fields during communication with PIV tokens. This flaw allows a malicious PIV token to misrepresent the length fields during RSA key generation process, resulting in a potential memory leak where sensitive data, such as PINs, passwords, and cryptographic keys, could be exposed. The stack memory may inadvertently be copied into heap memory, which, when processed by the caller, could allow this sensitive information to cross trust boundaries, posing significant security risks.

References