HexBrain

Internet Bug Bounty · Report #119989

b2i_PVK_bio heap corruption

Validstatus
1upvotes
28 Mar 2016disclosed

How it was found

Public disclosure, although I did inform the OpenSSL people beforehand.

https://guidovranken.wordpress.com/2016/03/01/public-disclosure-malformed-private-keys-lead-to-heap-corruption-in-b2i_pvk_bio/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original