Advisory ROSA-SA-2026-3154

Software: libtommath 1.2.0 OS: ROSA Virtualization 3.1 unaffected versions = libtommath-1.2.0-1.rv31 affected versions libtommath-1.2.0-1.rv31 CVE-ID: CVE-2023-36328 BDU-ID: 2023-06241 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the libtom function of the libtommath library is related to...

CVE-2025-40913

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

EUVD-2025-18120

Malicious code in bioql PyPI...

EUVD-2025-21701

Malicious code in bioql PyPI...

CVE-2025-40913

The Net::Dropbear Perl module (versions through 0.16 ) is vulnerable to an integer overflow because it embeds a version of the libtommath library that is susceptible to CVE-2023-36328 . Specifically, the issue is associated with the bn_mp_grow function, which can lead to unexpected behavior or po...

Amazon Linux 2023 : perl-CryptX, perl-CryptX-tests (ALAS2023-2025-1035)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1035 advisory. Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow...

CVE-2025-40914 Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

CVE-2025-40914

The perl-CryptX module (versions prior to 0.087 ) is susceptible to an integer overflow vulnerability due to a dependency on the libtommath library (specifically related to CVE-2023-36328 ). The flaw resides in the mp_grow() function, which could allow an attacker to compromise the confidentialit...

ROS-20231023-01

Vulnerability in libtom function of libtommath library is related to integer overflow. Exploitation exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

libtommath Heap Buffer Overflow RCE

The vulnerability of the libtom function in the libtommath library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2025-25214

Name of the Vulnerable Software and Affected Versions Perl CryptX versions prior to 0.087 Description The issue is related to an integer overflow associated with a dependency in the libtommath library embedded in Perl CryptX. This library is susceptible to an integer overflow. Recommendations For...