CVE-2026-32877

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-32877", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-16T21:03:44.420Z", "datePublished": "2026-03-30T20:36:43.672Z", "dateUpdated": "2026-03-31T15:26:01.443Z"}, "containers": {"cna": {"title": "Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field", "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "lang": "en", "description": "CWE-125: Out-of-bounds Read", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6"}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"version": ">= 2.3.0, < 3.11.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-30T20:36:43.672Z"}, "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0."}], "source": {"advisory": "GHSA-7jj6-4r42-w9h6", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-31T15:25:50.895890Z", "id": "CVE-2026-32877", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-31T15:26:01.443Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field", "source": {"advisory": "GHSA-7jj6-4r42-w9h6", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"status": "affected", "version": ">= 2.3.0, < 3.11.0"}]}], "references": [{"url": "https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6", "name": "https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-30T20:36:43.672Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-32877", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-31T15:25:50.895890Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-03-31T15:25:57.736Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-32877", "state": "PUBLISHED", "dateUpdated": "2026-03-30T20:36:43.672Z", "dateReserved": "2026-03-16T21:03:44.420Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-30T20:36:43.672Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "botan", "vendor": "randombit", "versions": [{"status": "affected", "version": ">= 2.3.0, < 3.11.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*", "matchCriteriaId": "3275D95B-2891-4D86-B9D3-E642CFDDEED0", "versionEndExcluding": "3.11.0", "versionStartIncluding": "2.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0."}, {"lang": "es", "value": "Botan es una biblioteca de criptograf\u00eda C++. Desde la versi\u00f3n 2.3.0 hasta antes de la versi\u00f3n 3.11.0, durante el descifrado SM2, el c\u00f3digo que verificaba el valor del c\u00f3digo de autenticaci\u00f3n (C3) no verific\u00f3 que el valor codificado tuviera la longitud esperada antes de la comparaci\u00f3n. Un texto cifrado no v\u00e1lido puede causar una lectura excesiva de la pila (heap over-read) de hasta 31 bytes, lo que resulta en un fallo o potencialmente en otro comportamiento indefinido. Este problema ha sido parcheado en la versi\u00f3n 3.11.0."}], "id": "CVE-2026-32877", "lastModified": "2026-06-17T10:36:29.630", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-32877", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-31T15:25:50.895890Z", "version": "2.0.3"}}]}, "published": "2026-03-30T21:17:09.767", "references": [{"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "Botan: Botan: Denial of Service via heap over-read during SM2 decryption", "id": "2453209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453209"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1284", "details": ["A flaw was found in Botan, a C++ cryptography library. During SM2 decryption, the library failed to validate the length of the authentication code value (C3) before comparison. A remote attacker could exploit this by providing a specially crafted invalid ciphertext, leading to a heap over-read of up to 31 bytes. This can result in a denial of service due to a crash or other undefined behavior."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-32877", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "rust-sequoia-sq", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "rust-sequoia-sqv", "product_name": "Red Hat Enterprise Linux 10"}], "public_date": "2026-03-30T20:36:43Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-32877\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-32877\nhttps://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.3.0,3.11.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "botan", "source": "cna", "vendor": "randombit"}, "product": "botan", "vendor": "randombit"}], "analysis": {"en": {"generated_at": "2026-04-13T16:36:51.450162+00:00", "value": {"mitigation_remediation": ["Upgrade Botan to version\u202f3.11.0 or later", "Avoid processing untrusted SM2 ciphertext until the library is updated"], "summary": {"action": "Upgrade", "impact": "Heap Buffer Over-read Leading to Crash or Undefined Behavior"}, "threat_synthesis": {"affected_systems": "All releases of Botan from version 2.3.0 up to, but not including, 3.11.0 are affected. The vulnerability appears in the SM2 decryption routine used by any application that links to the library.", "description_and_impact": "The vulnerability in the Botan cryptography library occurs during SM2 decryption. A check that verifies the size of the authentication code (C3) is omitted, so an attacker can supply a ciphertext that is too short and force the library to read beyond the intended buffer. This heap over\u2011read can reach 31 bytes and results in a crash or other undefined behavior, potentially producing a denial\u2011of\u2011service effect.", "risk_and_exploitability": "The CVSS score of 8.2 signals high severity. The EPSS score is less than 1\u202f% and the vulnerability is not listed in CISA\u2019s KEV catalog. A successful exploitation requires an attacker to supply a malformed SM2 ciphertext to a component that uses Botan for decryption. The impact is limited to an application crash or other undefined behavior; no direct privilege escalation or data compromise is described in the advisory."}}}}, "created": "2026-03-31T19:59:50.672269+00:00", "updated": "2026-04-14T16:42:30.457827+00:00", "vendors": ["randombit", "randombit$PRODUCT$botan"]}