Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/seal
main @ 02a5c34
13
Fixes
4
CVEs
CRITICAL
Peak severity
27.3%
Coverage
Highlights
Memory Safety: 3 prior fixes. Scrutinize any change in this area.
native/src/seal/ciphertext.cpp: most-fixed (2 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Weakness: Rejection sampling was missing during the expansion of ciphertext seeds, creating statistical bias that could compromise uniform random distribution guarantees.
Out-of-bounds Write: Lack of plaintext coefficient size validation against the polynomial modulus degree permitted out-of-bounds memory writes during BGV/BFV scaling variant operations.
Memory Safety: A critical lifecycle ordering bug in IntArray move assignment allowed the underlying memory pool to be released before the allocated data residing in it was freed.