Pycryptodome CVEs and Security Vulnerabilities

Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-52323

pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Pycryptodome Redhat

Products

Pycryptodome Pycryptodomex Ansible Automation Platform and 4 more

CVE-2018-15560

PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16 bytes.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Pycryptodome

Products

Pycryptodome

Page 1 of 1.