1 files changed, 2 insertions, 0 deletions

diff --git a/crypto/asymmetric_keys/x509_cert_parser.c b/crypto/asymmetric_keys/x509_cert_parser.c
index 13c4e5a5fe8c..4471e7ed8c12 100644
--- a/crypto/asymmetric_keys/x509_cert_parser.c
+++ b/crypto/asymmetric_keys/x509_cert_parser.c
@@ -399,6 +399,8 @@ int x509_extract_key_data(void *context, size_t hdrlen,
         ctx->cert->pub->pkey_algo = PKEY_ALGO_RSA;
 
         /* Discard the BIT STRING metadata */
+        if (vlen < 1 || *(const u8 *)value != 0)
+                return -EBADMSG;
         ctx->key = value + 1;
         ctx->key_size = vlen - 1;
         return 0;