A heap over-read vulnerability in the Botan cryptography library allows unauthenticated attackers to cause a crash or undefined behavior via malformed ciphertexts.

This vulnerability, categorized as CWE-125 (Out-of-bounds Read), occurs during SM2 decryption when the library fails to verify the length of the authentication code (C3) before comparison. An unauthenticated attacker can trigger this flaw by providing a specially crafted ciphertext, leading to a heap over-read of up to 31 bytes.

The primary impact of this vulnerability is a potential denial of service through application crashes, which may disrupt critical cryptographic operations dependent on the Botan library. Given the CVSS score of 8.2, the risk is significant due to the ease of exploitation, as the flaw is remotely triggerable without authentication and does not require user interaction.

Immediate Action: Update the Botan library to version 3.11.0 or later to incorporate the necessary length validation checks.

Proactive Monitoring: Monitor application logs for recurring segmentation faults or unexpected process terminations that may indicate exploitation attempts against the cryptographic module.

Compensating Controls: Ensure that systems using Botan are isolated from untrusted input where possible, and employ robust input validation at the application layer to filter malformed ciphertexts before they reach the decryption routine.

Public Exploit Available: Unknown

Organizations utilizing the Botan library for cryptographic operations must prioritize upgrading to version 3.11.0 immediately. The ease of remote exploitation and the potential for service disruption make this a high-priority remediation task for any infrastructure relying on this library for secure communication or data processing.