CWE-354.

bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list

• bitcoinjs-lib
• CWE-354

Forge: AES-GCM authentication bypass via unvalidated tagLength option

• CWE-354
• CWE-1284

<1.4.1 · fixed in 1.4.1

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

• CWE-354
• CWE-1284

<1.4.1 · fixed in 1.4.1

Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption

• digitalbazaar forge
• CWE-20
• CWE-354

zip: AES Entry HMAC Authentication Bypass on Premature EOF

• CWE-354
• CWE-1284

>=0.6.0, <9.0.0 · fixed in 9.0.0

Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8…

• Dell PowerProtect Data Domain
• CWE-354

DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check

• DAMO Academy VideoLLaMA2
• CWE-345
• CWE-354

Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

• CWE-354

>=1.2.0, <1.11.13 · fixed in 1.11.13

virtualenv: Downloaded wheel selection and caching precede verification

• CWE-354

<21.14.9 · fixed in 21.14.9

HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity

• Eclipse Foundation Eclipse KeyPont - GOSE
• CWE-354

Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.

• NLnet Labs Unbound
• CWE-354

Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

• Apache Software Foundation Apache Camel
• CWE-354

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

• CWE-354

<3.1.2 · fixed in 3.1.2

Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height

• ZcashFoundation zebra
• CWE-354

Hex writes unverified package tarballs to standard output in mix hex.package fetch

• hex
• CWE-354

Checksum database bypass for golang.org/toolchain in cmd/go

• CWE-354

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

Checksum bypass for golang.org/fips140 in cmd/go

• CWE-354

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

• MongoDB libmongocrypt
• CWE-354

HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates

• HP Inc ThinPro 8.1
• HP Inc ThinPro 9
• CWE-354

Cache poisoning via unvalidated image layer DiffIDs

• moby BuildKit
• CWE-354

Container blob cache can accept unverified content

• moby BuildKit
• CWE-354

CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-345
• CWE-354

CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check

• Legion of the Bouncy Castle Inc. bc-csharp
• CWE-354

IesEngine stream-mode MAC forgery via length-dependent KDF split

• Legion of the Bouncy Castle Inc. bc-csharp
• CWE-354

AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication

• Legion of the Bouncy Castle Inc. bc-csharp
• CWE-354

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code.

• Eclipse Foundation NetX Duo
• CWE-354

Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

• tauri-plugin-updater
• CWE-354

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

• ultravioletrs cocos
• CWE-346
• CWE-354

mport verify can compare stale checksum data after hashing failures

• MidnightBSD mport
• CWE-354
• CWE-755

mport index decompression can leave partial or corrupt index data after zstd failures

• MidnightBSD mport
• CWE-354
• CWE-755

Security Advisory 0160

• Arista Networks EOS
• CWE-354

Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write

• Netcore NR268
• CWE-354

Windows Installer Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• CWE-354

Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

• Cisco Secure Email
• CWE-354

Linux Foundation Magma SecurityModeComplete integrity check

• Linux Foundation Magma
• CWE-345
• CWE-354

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the…

• Authentication bypass
• Race condition

AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

• OpenSSL
• CWE-354

Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

• uber kraken
• CWE-354

OpenPGP AEAD decryption skips final tag on chunk-aligned data

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

IESEngine stream-mode MAC forgery via length-dependent KDF split

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

CMS AuthEnvelopedData fails to enforce tag-length on decryption

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

CCM-family modes write plaintext to caller buffer before tag check

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

CMS AuthenticatedData content not bound to MAC when authAttrs present

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name

• NLnet Labs Unbound
• CWE-354

Silent Drop of TLS 1.3 Encrypted Records in s2n-tls

• AWS s2n-tls
• CWE-354

Improper certificate validation in ASUS Router

• ASUS Router
• Weak cryptography or TLS
• CWE-354

1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

• Rockwell Automation 1756-EN2, 1756-EN3
• Rockwell Automation 1756-ENBT
• CWE-354

melange: Incomplete package integrity verification allows data section substitution

• CWE-345
• CWE-354

<1.2.9 · fixed in 1.2.9

pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field

• CWE-354

<10.34.1 || >=11.0.0, <11.4.0 · fixed in 10.34.1, 11.4.0

HMAC-BLAKE2 final discards message when key length exceeds block size

• wolfSSL
• CWE-354

Mastodon: Spoofing of attribution domains

• mastodon
• CWE-354

Mastodon: Removal of integrity-protected JSON entries from signed activities

• mastodon
• CWE-354

Apache APISIX: Authentication bypass in jwe-decrypt

• Apache Software Foundation Apache APISIX
• CWE-354

Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

• Rockwell Automation CompactLogix 5370
• CWE-354

CMS AuthEnvelopedData Processing May Accept Forged Messages

• OpenSSL
• CWE-354

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

• OpenSSL
• CWE-354

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

• CWE-354

>=2.199.0, <2.257.2 || >=3.0.0, <3.8.0 · fixed in 2.257.2, 3.8.0

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

• Weak cryptography or TLS
• CWE-354

<4.4.1 · fixed in 4.4.1