Oopen-quantum-safe

Products

Exploited and recent CVEs

• CVE-2026-46344 Medium 5.3 liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194) 0.3%
• CVE-2026-44518 Medium 5.3 liboqs: XMSS Buffer Overread Bug 0.3%
• CVE-2025-52473 Medium 5.9 liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20 0.2%
• CVE-2025-48946 Low 3.7 liboqs affected by theoretical design flaw in HQC 0.2%
• CVE-2024-54137 High 7.4 liboqs has a correctness error in HQC decapsulation 0.4%
• CVE-2024-37305 High 8.2 Buffer overflow in deserialization in oqs-provider 0.4%
• CVE-2024-36405 Medium 5.9 Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options 0.5%