description: In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
problem types: missing length checks for cryptographic primitives
affected:
{
product: NSS
vendor: Mozilla
versions:
lessThan: 3.46, status: affected, version: unspecified, versionType: custom
}