IMFreedom Security

Description

decrypt_out() always writes 8 bytes past the supplied buffer, which is always allocated on the stack. We don’t believe this can cause anything outside of a crash.

Mitigation

decrypt_out() is fixed to not write past the end of the buffer.