Vulnerability Spotlight: ARM Mbedtls x509 ECDSA invalid public key Code Execution Vulnerability
Talos disclosed TALOS-2017-0274/CVE-2017-2784, a code execution vulnerability in ARM MbedTLS, the SSL/TLS implementation formerly known as PolarSSL that targets embedded devices. The flaw sits in the code handling elliptic curve cryptography keys: a...