CVE-2023-39908

https://notcve.org/view.php?id=CVE-2023-39908

14 Aug 2023 — The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory. • https://blog.inhq.net/posts/yubico-yubihsm-pkcs-vuln • CWE-125: Out-of-bounds Read •