关键信息 漏洞标题 Insufficient Length Validation in decrypt() in SM2-PKE 漏洞ID GHSA-j9xq-69pf-pcm8 受影响版本 0.14.0-rc.0, 0.14.0-pre.0 漏洞严重等级 High 描述 A denial-of-service vulnerability exists in the SM2 public-key encryption (PKE) implementation: the path performs unchecked operations on input buffers derived from untrusted ciphertext. An attacker can submit short/undersized ciphertext or carefully-crafted DER-encoded structures to trigger bounds-check panics (Rust unwinding) which crash the calling thread or process. 影响 Direct Denial of Service: remote untrusted input can crash the thread/process handling decryption. Low attacker effort: crafting short inputs or small DER octet strings is trivial. Wide exposure: any application that exposes decryption endpoints and links this library is at risk. 推荐修复 Perform defensive length checks before any usage and return a controlled instead of allowing a panic. Minimal fixes in : - 检查输入长度是否符合预期，如不满足则返回错误。 发现者 XlabAI Team of Tencent Xuanwu Lab Atuin Automated Vulnerability Discovery Engine