pbkdf2: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos (critical). GHSA-h7cp-r72f-jxh6, CVE-2025-6545.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?