Cryptopp vulnerabilities

Products

• Crypto\+\+ 13

Newest

• cryptopp crypto\+\+ A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of... CVE-2024-28285 Fix available 9.8 CriticalMay 13, 2024
• cryptopp crypto\+\+ ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of... CVE-2023-50981 Fix available 7.5 HighDecember 18, 2023
• cryptopp crypto\+\+ gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service ... CVE-2023-50980 Fix available 7.5 HighDecember 18, 2023
• cryptopp crypto\+\+ Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1... CVE-2023-50979 Fix available 5.9 MediumDecember 18, 2023
• cryptopp crypto\+\+ Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function... CVE-2022-48570 7.5 HighAugust 22, 2023
• cryptopp crypto\+\+ Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is... CVE-2021-43398 Disputed 5.3 MediumNovember 4, 2021
• cryptopp crypto\+\+, fedoraproject fedora +1 more The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during... CVE-2021-40530 Fix available 5.9 MediumSeptember 6, 2021
• cryptopp crypto\+\+ Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This... CVE-2019-14318 Fix available 5.9 MediumJuly 30, 2019
• cryptopp crypto\+\+ Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate... CVE-2017-9434 Fix available 5.3 MediumJune 5, 2017
• cryptopp crypto\+\+ Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The... CVE-2016-7544 7.5 HighJanuary 30, 2017
• cryptopp crypto\+\+, debian linux +1 more Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine.... CVE-2016-9939 Fix available 7.5 HighDecember 26, 2016
• cryptopp crypto\+\+ Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG... CVE-2016-7420 Fix available 5.9 MediumSeptember 16, 2016
• cryptopp crypto\+\+ The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec:... CVE-2016-3995 Fix available 7.5 HighApril 25, 2016
• cryptopp crypto\+\+ library, opensuse +1 more The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not... CVE-2015-2141 Fix available 5.0 MediumJune 29, 2015