Libtom

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Libtom records in CISA KEV

No Libtom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libtomcrypt 3 records HIGH Libtommath 1 record MEDIUM

Records

3 records in Libtomcrypt · all components

TI-2019-12960 CVE-2019-17362 · GHSA-x32c-6j92-4hp9

In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in…

HIGH 78

In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03108 Published 2019-10-09 No fix listed CWE-125

TI-2016-05260 CVE-2016-6129

The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE…

LOW 34

The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00768 Published 2017-02-13 No fix listed CWE-20

TI-2018-08929 CVE-2018-12437

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures…

LOW 23

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP.

CVSS 3.1MEDIUM 4.9 Physical No auth No interaction EPSS 0.00536 Published 2018-06-15 No fix listed CWE-200

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0