Advisories · Technology
open-quantum-safe liboqs.
Every CVE that names open-quantum-safe liboqs among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)
- open-quantum-safe liboqs
- Memory corruption
- CVSS 5.3 Medium
liboqs: XMSS Buffer Overread Bug
- open-quantum-safe liboqs
- Memory corruption
- CWE-20
- CVSS 5.9 Medium
liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20
- open-quantum-safe liboqs
- Information disclosure
- CVSS 3.7 Low
liboqs affected by theoretical design flaw in HQC
- open-quantum-safe liboqs
- Weak cryptography or TLS
- CVSS 7.4 High
liboqs has a correctness error in HQC decapsulation
- open-quantum-safe liboqs
- Information disclosure
- CVSS 5.9 Medium
Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options
- open-quantum-safe liboqs
- CWE-208
- CWE-385