open-quantum-safe liboqs vulnerabilities
9 published CVEs name open-quantum-safe liboqs among the affected products.
- 9Published CVEs9 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47738
liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs
open-quantum-safe · liboqs
Medium5.3 - CVE-2026-44519
liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)
open-quantum-safe · liboqs
Medium5.1 - CVE-2026-104254
liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215)
open-quantum-safe · liboqs
Medium5.3 - CVE-2026-46344
liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)
open-quantum-safe · liboqs
Medium5.3 - CVE-2026-44518
liboqs: XMSS Buffer Overread Bug
open-quantum-safe · liboqs
Medium5.3 - CVE-2025-52473
liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20
open-quantum-safe · liboqs
Medium5.9 - CVE-2025-48946
liboqs affected by theoretical design flaw in HQC
open-quantum-safe · liboqs
Low3.7 - CVE-2024-54137
liboqs has a correctness error in HQC decapsulation
open-quantum-safe · liboqs
High7.4 - CVE-2024-36405
Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options
open-quantum-safe · liboqs
Medium5.9