libgnutls Heap Overread Vulnerability in RSA Key Exchange with PKCS#11 Keys

A memory corruption vulnerability allowing information disclosure has been identified in libgnutls. This issue arises when a remote attacker sends an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token. The manipulation can trigger a short heap overread, leading to unauthorized memory access.

Impact

Exploitation of this vulnerability causes a heap overread, allowing a remote attacker to read sensitive information from memory.