Security Advisory
CVE-2016-2195
9.8
CRITICAL
Vulnerability Description
Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.
Published Date
May 13, 2016
Official Source
NIST NVD Advisory