Stack Buffer Overflow in mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der() Can Occur in Mbed TLS 3.6 Before 3.6.1

CVE-2024-45158

What is CVE-2024-45158?

A stack buffer overflow issue has been identified in Mbed TLS versions prior to 3.6.1. This vulnerability occurs in the functions mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der() when the bits parameter exceeds the limits of the largest supported curve. In specific configurations where PSA is disabled, all values of bits could be impacted. While internal library calls may not trigger this, direct calls from applications pose a security risk, potentially leading to unauthorized data access or application crashes.

References