OpenSSL have published a security advisory. Here's how it affects BoringSSL:
| CVE | Summary | Severity in OpenSSL | Impact to BoringSSL |
|---|---|---|---|
| CVE-2023-1255 | Input buffer over-read in AES-XTS implementation on 64 bit ARM | Low | Not affected; issue was introduced after fork |