open-quantum-safe

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

open-quantum-safe records in CISA KEV

No open-quantum-safe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Liboqs 7 records MEDIUM

Records

7 records in Liboqs · all components

TI-2024-20867 CVE-2024-31510

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate…

MEDIUM 50

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-ipd_avx2/sign.c component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00618 Published 2024-05-24 Will not fix CWE-1319

TI-2024-36253 CVE-2024-54137

liboqs has a correctness error in HQC decapsulation

LOW 35

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00403 Published 2024-12-06 Fixed in 0.12.0 CWE-200

TI-2024-24191 CVE-2024-36405

Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options

LOW 33

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2024-06-10 Partial fix · 0.10.1 CWE-208

TI-2026-34064 CVE-2026-46344

liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)

LOW 30

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-05-29 Partial fix · 0.16.0 CWE-125

TI-2026-32448 CVE-2026-44518

liboqs: XMSS Buffer Overread Bug

LOW 30

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-05-29 Partial fix · 0.16.0 CWE-125

TI-2025-32600 CVE-2025-52473

liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20

LOW 26

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00235 Published 2025-07-10 Partial fix · 0.14.0 CWE-200

TI-2025-31084 CVE-2025-48946

liboqs affected by theoretical design flaw in HQC

LOW 17

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00248 Published 2025-05-30 Partial fix · 0.13.0 CWE-327

Open these records in search →