// research area
Post-quantum signature implementations, the Mbed TLS library and the Open Quantum Safe OpenSSL provider. All credited to Eva Crystal (0xiviel), XSource Security.
Integer underflow of mlen in crypto_sign_open() in the CROSS reference implementation leads to a heap buffer overflow during signature verification.
Insufficient protection of serialized SSL session/context data can lead to memory-safety issues when restoring tampered or corrupted state. Credited jointly with Haruto Kimura (Stella).
FFDH key exchange lacks contributory-behaviour / peer-key validation, enabling protocol-level abuse. Found independently by Eva Crystal (0xiviel).
Out-of-bounds read in mbedtls_ccm_finish(): an oversized tag_len in the multipart CCM API exposes adjacent CCM context data. Discovered through the Intigriti Trusted Firmware program.
Possible buffer overflow in mbedtls_ecdh_calc_secret() when the output buffer is too small - up to remote code execution.
LMS verification did not bind the signature and public key to the parameter set of the object in use. Reported publicly in issue #2568 and credited as an independent report in the joint advisory; CVE-2026-104255 assigned.
Double-free vulnerability in oqs-provider. Fix contributed as upstream PR #766, merged and credited.
Duplicate NULL-check correction in oqsx_get_hybrid_params(). Fix contributed as upstream PR #767, merged and credited.
