CVE-2026-35199

{"id": "CVE-2026-35199", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35199", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-07T14:56:16.132141Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "microsoft", "product": "SymCrypt", "versions": [{"status": "affected", "version": ">= 103.5.0, < 103.11.0"}]}]}], "published": "2026-04-06T20:16:27.543", "references": [{"url": "https://github.com/microsoft/SymCrypt/security/advisories/GHSA-rvj8-8h6x-hjmg", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height >= 32 (which includes standard predefined parameters), this causes silent truncation to zero, resulting in a drastically undersized scratch buffer allocation followed by a heap buffer overflow during signature computation. Exploiting this issue would require an application using SymCrypt to perform an XMSS^MT signature using an attacker-controlled parameter set. It is uncommon for applications to allow the use of attacker-controlled parameter sets for signing, since signing is a private key operation, and private keys must be trusted by definition. Additionally, XMSS(^MT) signing should only be performed in a Hardware Security Module (HSM). XMSS(^MT) signing is provided in SymCrypt only for testing purposes. This is a general rule irrespective of this CVE; XMSS(^MT) and other stateful signature schemes are only cryptographically secure when it is guaranteed that the same state cannot be reused for two different signatures, which cannot be guaranteed by software alone. For this reason, XMSS(^MT) signing is also not FIPS approved when performed outside of an HSM. Fixed in version 103.11.0."}, {"lang": "es", "value": "SymCrypt es la biblioteca de funciones criptogr\u00e1ficas central utilizada actualmente por Windows. Desde la versi\u00f3n 103.5.0 hasta antes de la 103.11.0, la funci\u00f3n SymCryptXmssSign pasa un valor de recuento de hojas de 64 bits a una funci\u00f3n auxiliar que acepta un par\u00e1metro de 32 bits. Para conjuntos de par\u00e1metros XMSS^MT con una altura total de \u00e1rbol >= 32 (lo que incluye par\u00e1metros predefinidos est\u00e1ndar), esto causa una truncaci\u00f3n silenciosa a cero, lo que resulta en una asignaci\u00f3n de b\u00fafer temporal dr\u00e1sticamente insuficiente seguida de un desbordamiento de b\u00fafer de pila durante el c\u00e1lculo de la firma. Explotar este problema requerir\u00eda que una aplicaci\u00f3n que use SymCrypt realice una firma XMSS^MT utilizando un conjunto de par\u00e1metros controlado por el atacante. Es poco com\u00fan que las aplicaciones permitan el uso de conjuntos de par\u00e1metros controlados por el atacante para la firma, ya que la firma es una operaci\u00f3n de clave privada, y las claves privadas deben ser confiables por definici\u00f3n. Adem\u00e1s, la firma XMSS(^MT) solo debe realizarse en un M\u00f3dulo de Seguridad de Hardware (HSM). La firma XMSS(^MT) se proporciona en SymCrypt solo con fines de prueba. Esta es una regla general independientemente de este CVE; XMSS(^MT) y otros esquemas de firma con estado solo son criptogr\u00e1ficamente seguros cuando se garantiza que el mismo estado no puede reutilizarse para dos firmas diferentes, lo cual no puede ser garantizado solo por software. Por esta raz\u00f3n, la firma XMSS(^MT) tampoco est\u00e1 aprobada por FIPS cuando se realiza fuera de un HSM. Corregido en la versi\u00f3n 103.11.0."}], "lastModified": "2026-07-24T21:10:00.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:symcrypt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "850E34D6-8319-4094-8DE2-E9DAE3CD7478", "versionEndExcluding": "103.11.0", "versionStartIncluding": "103.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}