PT-2024-27463 · Unknown +1 · Oqs-Provider +1

Name of the Vulnerable Software and Affected Versions: oqs-provider versions prior to 0.6.1 Description: The issue arises from the way oqs-provider handles lengths decoded with DECODE UINT32 at the start of serialized hybrid keys and signatures. Unchecked length values are later used for memory...

PT-2021-1400

Name of the Vulnerable Software and Affected Versions: java-11-openjdk affected versions not specified Description: The issue is related to the OpenJDK keytool application failing when used with OpenJDK in FIPS mode due to the NSS Software Token not allowing the import of private or secret plain...