PT-2026-108122

For a hybrid KEM public key of type PublicKey::WingKemDraft06 or PublicKey::X25519MlKem768Draft06, the PublicKey::encapsulate derand function would panic in an indexing operation on a seed input of length shorter than 32 bytes. Impact Applications encapsulating with an attacker controlled seed...

CLSA-2026-1784715279 hplip: Fix of CVE-2026-14544

CVE-2026-14544: fix integer overflow in the hpcups PCLm encapsulation path PCLmGenerator::Encapsulate, an incomplete-fix follow-up to CVE-2026-8631 backport of the Red Hat fix from hplip-3.21.2-6.el98.5...

CLSA-2026-1784711548 hplip: Fix of CVE-2026-14544

CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix in the hpcups processing path PCLmGenerator::Encapsulate, so the full whiteStripLen srcNumComponents product is overflow-checked backport of RHEL/AlmaLinux hplip-3.21.2-6.el98.5, RHSA-2026:40831...

EUVD-2026-19969

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

UBUNTU-CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

Fedora: Security Advisory for jakarta-activation1 (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-37392 CVE-2023-49292 affecting package golang for versions less than 1.21.6-1

ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...

CVE-2023-49292

ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...

CVE-2023-49292: Exposure of Sensitive Information to an Unauthorized Actor

ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...

PT-2023-31155

Name of the Vulnerable Software and Affected Versions ecies versions prior to 2.0.8 Description The issue allows an attacker to recover any private key that interacts with the vulnerable functions. This is due to a bug in the ECDH function where it does not check whether the provided public key i...

PT-2018-4319

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by a lack of input validation for message length, resulting in a buffer over read in drm app encapsulate save keys. This affects various Qualcomm...