Open-quantum-safe Liboqs vulnerabilities

• open-quantum-safe liboqs liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs CVE-2026-47738 5.3 MediumNovember 6, 2026
• open-quantum-safe liboqs liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others) CVE-2026-44519 5.1 MediumNovember 6, 2026
• open-quantum-safe liboqs liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215) CVE-2026-104254 5.3 MediumNovember 6, 2026
• open-quantum-safe liboqs liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194) CVE-2026-46344 Fix available 5.3 MediumMay 29, 2026
• open-quantum-safe liboqs liboqs: XMSS Buffer Overread Bug CVE-2026-44518 5.3 MediumMay 29, 2026
• open-quantum-safe liboqs liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20 CVE-2025-52473 Fix available 5.9 MediumJuly 10, 2025
• open-quantum-safe liboqs liboqs affected by theoretical design flaw in HQC CVE-2025-48946 3.7 LowMay 30, 2025
• open-quantum-safe liboqs liboqs has a correctness error in HQC decapsulation CVE-2024-54137 Fix available 7.4 HighDecember 6, 2024
• open-quantum-safe liboqs Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options CVE-2024-36405 Fix available 5.9 MediumJune 10, 2024