CVE-2024-28285

Name of the Vulnerable Software and Affected Versions Cryptopp Crypto++ version 8.9

Description A fault injection issue in the SymmetricDecrypt function, located in cryptopp/elgamal.h, allows an attacker to co-reside in the same system with a victim process. This enables the attacker to disclose information and escalate privileges.

Recommendations For Cryptopp Crypto++ version 8.9, consider disabling the SymmetricDecrypt function in cryptopp/elgamal.h as a temporary workaround to minimize the risk of exploitation. Restrict access to sensitive information and processes to prevent privilege escalation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.