Randombit vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20243
3. 202613

Newest CVEs

• CVE-2026-104267

  Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters

  randombit · botan

  Medium4.1
• CVE-2026-48057

  Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn

  randombit · botan

  Low2.1
• CVE-2026-118769

  Botan: Integer overflow when reporting block size in FFI can cause memory corruption

  randombit · botan

  Critical9.2
• CVE-2026-118768

  Botan: CLI utility `ocsp_check` accepts unauthenticated responses

  randombit · botan

  Medium5.9
• CVE-2026-118767

  Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs

  randombit · botan

  Medium4.8
• CVE-2026-118766

  Botan: Online OCSP redirects enable blind requests to internal HTTP services

  randombit · botan

  Medium6.1
• CVE-2026-118765

  Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

  randombit · botan

  High7.3
• CVE-2026-44378

  Botan: Quadratic complexity decoding BER indefinite length encodings

  randombit · botan

  Medium6.9
• CVE-2026-34582

  Botan has a TLS 1.3 certificate authentication bypass

  randombit · botan

  High8.7
• CVE-2026-34580

  Botan has a certificate authentication bypass due to trust anchor confusion

  randombit · botan

  Critical9.3