Crash and disclosure via unchecked serialized credential buffers

Buffer-validation failure in Okta MFA Credential Provider for Windows allows attackers to crash its process via malformed credentials. It interprets serialized input as a Kerberos logon structure without checking buffer length or packed string offsets, enabling out-of-bounds reads and writes and disclosure into local system logs. Exploitation requires the provider to process a malformed buffer; required privileges and remote reachability are not established by the supplied record or retrieved vendor material.