🎯 New Report #3620753: V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)
🔺Severity: Medium
👽 Reporter: misop00p
⭐️ Reputation: 182
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-03-22
⏰ Disclosed: 2026-05-28 16:35:27
📝 Summary: A vulnerability was discovered in the "aws-encryption-provider" component where the "V2Plugin.Decrypt" function accessed the ciphertext slice without checking if it was empty, leading to a panic and crashing the entire gRPC server process.
📂 Report JSON File: 3620753
@hackeronereports