LogicalBreach Academy

V2Plugin.Decrypt panics on empty ciphertext (Remote DoS) | Free Bug Bounty Writeup | LogicalBreach Academy

Writeups Cheatsheets Tools Collections Authors Noc Pricing

Back

Array Index Underflow (CWE-129)CVSS 6.5Medium

V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)

hackerone-reports

May 31, 2026

3 views

Save

€0

Vulnerability Summary

HackerOne disclosed report --> https://hackerone.com/reports/3620753 by misop00p

Component: pkg/plugin/plugin_v2.go:182 Affected Version: aws-encryption-provider @ 4341c70 (all versions) Found by: Fuzz testing (FuzzV2Decrypt, seed#0: empty []byte{}) TLP: TLP:Amber

Summary

V2Plugin.Decrypt() accesses request.Ciphertext[0] without checking that the slice is non-empty. Same root cause as BUG-001 but in the V2 (KMS v2) API path. Crashes the entire gRPC server process.