CVE-2023-39908

https://notcve.org/view.php?id=CVE-2023-39908

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory. • https://blog.inhq.net/posts/yubico-yubihsm-pkcs-vuln https://www.yubico.com/support/security-advisories/ysa-2023-01 • CWE-125: Out-of-bounds Read •