Vulnerabilities in open-quantum-safe
7 resultsVexday analysis
O Open Quantum Safe apresenta um perfil de risco baixo com 7 CVEs registradas, nenhuma sob exploração ativa e sem vulnerabilidades críticas identificadas. A fraqueza dominante é leitura fora dos limites (CWE-125), com 2 novas vulnerabilidades publicadas nos últimos 90 dias, indicando atividade contínua mas controlada de correção.
CVE-2024-36405MEDIUMControl-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other optionsEPSS 0.5%CVE-2024-37305HIGHBuffer overflow in deserialization in oqs-provider EPSS 0.4%CVE-2024-54137HIGHliboqs has a correctness error in HQC decapsulationEPSS 0.4%CVE-2026-44518MEDIUMliboqs: XMSS Buffer Overread BugEPSS 0.3%CVE-2026-46344MEDIUMliboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)EPSS 0.3%CVE-2025-48946LOWliboqs affected by theoretical design flaw in HQCEPSS 0.2%CVE-2025-52473MEDIUMliboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20EPSS 0.2%