CVE-2026-118765

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...

CVE-2026-118765 Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...

CVE-2026-118765

The Botan C++ cryptography library (versions 3.7.0 through 3.13.0 ) is vulnerable to a predictable state issue in the AutoSeeded_RNG component. If an application calls AutoSeeded_RNG::clear() followed by randomize with an empty output buffer while the generator is unseeded, the system may incorre...

EUVD-2026-113274

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...

CVE-2026-118765 Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...