V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)

Array Index Underflow (CWE-129)CVSS 6.5€0

misop00p

Disclosed on HackerOne · May 28, 2026

4 min 9

Publicly disclosed report · by misop00p

Component: pkg/plugin/plugin_v2.go:182 Affected Version: aws-encryption-provider @ 4341c70 (all versions) Found by: Fuzz testing (FuzzV2Decrypt, seed#0: empty []byte{}) TLP: TLP:Amber

Summary

V2Plugin.Decrypt() accesses request.Ciphertext[0] without checking that the slice is non-empty. Same root cause as BUG-001 but in the V2 (KMS v2) API path. Crashes the entire gRPC server process.

Identification Required

You must be logged in to read this writeup. Join our community of researchers today.

Sign In Register

LogicalBreach Academy

V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)

Summary

Identification Required

Discussion