What’s Vulnerable › Products

open-quantum-safe liboqs vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your open-quantum-safe liboqs version is affected

Latest open-quantum-safe liboqs vulnerabilities

• CVE-2026-46344 — liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194) (CVSS 5.3)
• CVE-2026-44518 — liboqs: XMSS Buffer Overread Bug (CVSS 5.3)
• CVE-2025-52473 — liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20 (CVSS 5.5)
• CVE-2025-48946 — liboqs affected by theoretical design flaw in HQC (CVSS 3.7)
• CVE-2024-54137 — liboqs has a correctness error in HQC decapsulation (CVSS 7.5)
• CVE-2024-36405 — Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options (CVSS 7.5)
• CVE-2024-31510 — (CVSS 9.8)