Priority LOW 24
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
Vulnerabilities
11 records
Priority LOW 22
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
Priority LOW 24
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
TI-2026-34064 CVE-2026-46344
liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)
Priority LOW 30
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
TI-2026-32448 CVE-2026-44518
liboqs: XMSS Buffer Overread Bug
Priority LOW 30
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
TI-2025-32600 CVE-2025-52473
liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20
Priority LOW 26
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
Priority LOW 17
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
Priority LOW 35
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
Priority LOW 36
oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs.
TI-2024-24191 CVE-2024-36405
Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options
Priority LOW 33
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms.
TI-2024-20867 CVE-2024-31510
An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate…
Priority MEDIUM 50
An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-ipd_avx2/sign.c component.