pycryptodome records

2 published records for vendor pycryptodome.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2018-15560No exploit	PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functipycryptodome · pycryptodome · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	1.8%	Aug 19, 2018
23Monitor	CVE-2023-52323No exploit	PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.pycryptodome · pycryptodome · CWE-203 Pre-auth	Medium5.9	—	0.6%	Jan 5, 2024

CVE-2018-15560
31Monitor
PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functi
HighCVSS 7.5No exploitEPSS 2%
pycryptodome · pycryptodomeAug 19, 2018
CVE-2023-52323
23Monitor
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
pycryptodome · pycryptodomeJan 5, 2024