TI-2026-29047 CVE-2026-40253
openCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c
Priority MEDIUM 63
openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX.
opencryptoki
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
opencryptoki records in CISA KEVNo opencryptoki vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Opencryptoki · all components
TI-2026-19251 CVE-2026-23893
openCryptoki has improper link resolution before file access (link following)
Priority LOW 31
openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX.
TI-2026-18309 CVE-2026-22791
openCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP
Priority LOW 29
openCryptoki is a PKCS#11 library and tools for Linux and AIX.
TI-2024-00843 CVE-2024-0914 · GHSA-qghg-5fph-q28c
Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
Priority LOW 28
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts.
TI-2012-03797 CVE-2012-4455 · GHSA-45q7-7mrv-f7jr
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on…
Priority LOW 28
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
TI-2021-02729 CVE-2021-3798 · GHSA-f2gp-jqv6-cmxg
Information disclosure in opencryptoki
Priority LOW 25
A flaw was found in openCryptoki.
TI-2012-03796 CVE-2012-4454 · GHSA-mvr7-mrp6-366f
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set…
Priority LOW 17
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.