Pycryptodome

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pycryptodome records in CISA KEV

No Pycryptodome vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pycryptodome 2 records LOW Pycryptodomex 1 record LOW

Records

2 records in Pycryptodome · all components

TI-2018-11096 CVE-2018-15560 · GHSA-hgg3-g7gr-66r7

PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c…

LOW 36

PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16 bytes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01756 Published 2018-08-20 Fixed in 3.6.6 CWE-190

TI-2023-28707 CVE-2023-52323 · GHSA-j225-cvw7-qrx7

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP…

LOW 27

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00618 Published 2024-01-05 Partial fix · 3.19.1 CWE-203

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0