Attributed metadata history
Up to 100 retained publisher events per page for acad48ae14300f0312ddebd88233425190a4b7eda96bbdc07b925e92d0b34c78. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:03 UTC
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCrypto APIs are callable by all Trustlets without restriction. SCrypto is in fact the OpenSSL’s FIPS compliant library with an abstraction layer added to facilitate the same APIs for crypto operations that are present between Trustlets and Secure Drivers. The SCrypto command implements three kinds of functions: hashing (MD function family), encryption/decryption (3DES, AES, RSA), and signing (RSA). The race condition vulnerability is in the ciphering command implementation of RSA encryption.
Fingerprint: c0c82e145339ee13105774f46648d32e718730ce394ce22357993e8c38be2bc9
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
available
Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578