Randombit vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20243
3. 202611

Newest CVEs

• CVE-2026-118769

  Botan: Integer overflow when reporting block size in FFI can cause memory corruption

  randombit · botan

  Critical9.2
• CVE-2026-118768

  Botan: CLI utility `ocsp_check` accepts unauthenticated responses

  randombit · botan

  Medium5.9
• CVE-2026-118767

  Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs

  randombit · botan

  Medium4.8
• CVE-2026-118766

  Botan: Online OCSP redirects enable blind requests to internal HTTP services

  randombit · botan

  Medium6.1
• CVE-2026-118765

  Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

  randombit · botan

  High7.3
• CVE-2026-44378

  Botan: Quadratic complexity decoding BER indefinite length encodings

  randombit · botan

  Medium6.9
• CVE-2026-34582

  Botan has a TLS 1.3 certificate authentication bypass

  randombit · botan

  High8.7
• CVE-2026-34580

  Botan has a certificate authentication bypass due to trust anchor confusion

  randombit · botan

  Critical9.3
• CVE-2026-32877

  Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

  randombit · botan

  High8.2
• CVE-2026-32883

  Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass

  randombit · botan

  Medium5.9