TI-2022-24110 CVE-2022-48570 · GHSA-mgx5-qmrg-fjwp
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation.
Priority HIGH 72
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation.
Cryptopp
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Cryptopp records in CISA KEVNo Cryptopp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2023-27866 CVE-2023-50981 · GHSA-wrgh-jm24-7hv6
ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a…
Priority MEDIUM 40
ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of 26899513…
TI-2016-08052 CVE-2016-9939 · GHSA-x7wj-9rr2-gfcg
Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding…
Priority MEDIUM 40
Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine.
TI-2016-06416 CVE-2016-7544 · GHSA-3wp6-w2rj-8433
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions.
Priority LOW 38
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions.
TI-2016-03396 CVE-2016-3995 · GHSA-rfvf-996j-mmvf
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and…
Priority LOW 37
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timi…
TI-2023-27865 CVE-2023-50980 · GHSA-x2gw-hrqg-xq6x
gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of…
Priority LOW 34
gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data for an F(2^m) curve, if the degree of each term in the polynomial is not strictl…
TI-2019-10669 CVE-2019-14318 · GHSA-j77v-9g36-cfp2
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation.
Priority LOW 32
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation.
TI-2016-06321 CVE-2016-7420 · GHSA-xh64-jjg2-744m
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a…
Priority LOW 30
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent atta…
TI-2021-17570 CVE-2021-40530 · GHSA-p3r9-6fhw-hgv8
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because…
Priority LOW 29
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public…
TI-2021-19343 CVE-2021-43398 · GHSA-86rq-fj99-chhj
Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey().
Priority LOW 28
Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey().
TI-2017-06846 CVE-2017-9434 · GHSA-2c95-vmhq-43cg
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in…
Priority LOW 28
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.
TI-2015-01917 CVE-2015-2141 · GHSA-xm6q-j5wx-7362
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does…
Priority LOW 28
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain…
TI-2023-27864 CVE-2023-50979 · GHSA-w7rq-556w-c7gg
Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
Priority LOW 27
Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.