CROSS Implementation Buffer Overflow Vulnerability in Post-Quantum Signature Algorithm

A buffer overflow vulnerability has been identified in the CROSS implementation of the post-quantum signature algorithm. This issue arises from an integer underflow in the 'crypto_sign_open()' function, leading to the overflow. The vulnerability exists in versions prior to commit 'fc6b7e7'.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or memory corruption.

Remediation

Users can update to the version that includes commit 'fc6b7e7' to address this vulnerability.