Full title: Noise-Java ChaChaPolyCipherState.encryptWithAd() Insufficient Boundary Checks Exploit 
Category: dos / poc
Platform: java
Noise-Java suffers from an issue located in the ChaChaPolyCipherState.encryptWithAd() method defined in ChaChaPolyCipherState.java, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation. However, some checks were found to be either incomplete or missing.

# 0day.today @ http://0day.today/