Vulnerability-Lookup

OPENSUSE-SU-2026:21634-1

Vulnerability from csaf_opensuse - Published: 2026-08-24 19:07 - Updated: 2026-09-16 21:46

Summary

Security update for liboqs

Severity

Moderate

Notes

Title of the patch: Security update for liboqs

Description of the patch: This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized `encaps_derand` pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signature verification (bsc#1267007 bsc#1267001) - Fixed Integer underflow in CROSS `crypto_sign_open()` - Fixed incorrect array size when calling `secure_clean` - Implemented optimization barrier `OQS_MEM_BLACK_BOX` and applied to `ct_select` in FrodoKEM Significant change: FrodoKEM algorithm change: * Existing FrodoKEM in 0.15.0 was renamed to ephemeral FrodoKEM (`KEM_efrodokem_<640|976|1344>_<aes|shake>`), and the salted variant of FrodoKEM was added under the prior names (`KEM_frodokem_<640|976|1344>_<aes|shake>`). Ephemeral FrodoKEM is recommended for applications where each keypair will encapsulate only a small number of shared secrets and ciphertexts. Standard (salted) FrodoKEM is recommended for applications where each keypair is expected to encapsulate large number of ciphertexts. Please consult [upstream](https://github.com/microsoft/PQCrypto-LWEKE/#frodokem-learning-with-errors-key-encapsulation) for more details. * mldsa-native integration: mldsa-native is a secure, fast, and portable C90 implementation of the ML-DSA post-quantum signature standard. It also includes optimized builds for x86_64 and aarch64. It is now the default implementation behind `SIG_ml_dsa_<44|65|87>`. * Updated HQC implementation: The HQC implementations in liboqs were updated to 20250822 spec. Its upstream switched from PQClean to the [official repo](https://gitlab.com/pqc-hqc/hqc). `KEM_hqc_<1|3|5>` is now enabled by default. * MQOM integration and memory-optimized build flag: MQOM is a third-round candidate in NIST's Additional Digital Signatures for the PQC Standardization Process. Portable, x86_64-optimized, and memory-optimized implementations were integrateinto liboqs under `OQS_ENABLE_SIG_MQOM`. * OpenSSH implementation of NTRU Prime: A public-domain OpenSSH implementation of NTRUPrime761 replaced the PQClean implementation as the default backend for `KEM_ntruprime_sntrup761`. Bug fixes: - Fixed incremental absorption bug in AVX512VL SHA3-512 [#2442](https://github.com/open-quantum-safe/liboqs/pull/2442) - Implemented fallback for when `EVP_DigestSqueeze` is unavailable [#2433](https://github.com/open-quantum-safe/liboqs/pull/2433) - Added API for detecting stateful signature support at runtime [#2434](https://github.com/open-quantum-safe/liboqs/pull/2434) - Fixed missing initialization and indexing bug in LMS [#2416](https://github.com/open-quantum-safe/liboqs/pull/2416) - Fixed erroneous MAYO_OK despite failed sample_solution() attempts in MAYO [#2403](https://github.com/open-quantum-safe/liboqs/pull/2403) - Limited pytest parallelism to prevent memory exhaustion in constrained environment [#2397](https://github.com/open-quantum-safe/liboqs/pull/2397) - Fixed cuPQC ML-KEM derand symbol names and `#if/#elif` chains [#2396](https://github.com/open-quantum-safe/liboqs/pull/2396) - Tightened Windows compiler detection [#2394](https://github.com/open-quantum-safe/liboqs/pull/2394) - Fixed mismatched macros in LMS [#2379](https://github.com/open-quantum-safe/liboqs/pull/2379) - Made fuzzers tolerant to disabled algorithms [#2359](https://github.com/open-quantum-safe/liboqs/pull/2359) - Removed inlined exponentiation in CROSS-RSDPG-1 [#2357](https://github.com/open-quantum-safe/liboqs/pull/2357) - Fixed incorrect arg register update in AVX512 Keccak [#2330](https://github.com/open-quantum-safe/liboqs/pull/2330) - Update to 0.15.0: * Significant changes: - Integrated SLH-DSA implementation from pq-code-package/slhdsa-c - SLH-DSA ACVP tests (#2237) - Integrate SLH-DSA-C Library (#2175) - Added NTRU back (#2176) - Removed all Dilithium implementations (#2275) - Replaced SPHINCS+ with SLH-DSA for CMake build option OQS_ALGS_ENABLED=STD (#2290) - Updated CROSS to version 2.2 (#2247) - Included DeriveEncapsulation functionality (#2221) - Integrated ML-KEM implementation from ICICLE-PQC (#2216) * Bug fixes: - Fixed erroneously disabled LMS variants with build flag OQS_ENABLE_SIG_STFL_LMS (#2310) - Fixed incorrect import in OV-III-pkc_skc (#2299) - Fixed incorrect actual signature length in signature full-cycle speed test (#2293) - Fixed ICICLE ML-KEM integration (#2288) - Disabled strict aliasing on SPHINCS+-SHAKE (#2264) - Fixed uninitialized length_encaps_seed for NTRU implementations (#2266) - Changed 64 bit add to 32 bit add to wrap on 32 bit counter for AES-CTR AES-NI implementation (#2252) - Improved random number generator security (#2225) - Added Classic McEliece sanitization patch (#2218) * Miscellaneous: - Deprecated noregress scripts (#2295) - Updated no-pass explanation for constant-time testing (#2294) - Re-enabled all ACVP tests (#2283) - Updated license info for ML-KEM (#2250) - Added Poutine SASL (#2213) - Updated ACVP to 1.1.0.40 (#2172) - Switched to dev mode for 0.14.1 (#2199) * Deprecation notice: liboqs 0.15.0 is the last version to officially support SPHINCS+. SPHINCS+ will be removed in the 0.16.0 release and replaced by SLH-DSA. liboqs 0.15.0 also removes support for Dilithium. Updated to 0.14.0: * Key encapsulation mechanisms: - HQC: Disabled compiler optimizations to avoid secret-dependent branching in certain configurations. HQC remains disabled by default. - ML-KEM: Updated the default ML-KEM implementation to [PQCP's mlkem-native v1.0.0](https://github.com/pq-code-package/mlkem-native/releases/tag/v1.0.0). * Digital signature schemes: - New API: added an API function to check if a signature scheme supports signing with a context string. - SNOVA: added [SNOVA](https://snova.pqclab.org/) from NIST Additional Signature Schemes Round 2. * Other changes: - Added an AVX512VL-optimized backend for SHA3. - Improved memory management throughout the codebase. - CVE-2025-52473: Disabled compiler optimizations for HQC to avoid secret-dependent branches. Thank you to Zhenzhi Lai and Zhiyuan Zhang from from the University of Melbourne and the Max Planck Institute for Security and Privacy for identifying the issue. (bsc#1246301)

Patchnames: openSUSE-Leap-16.0-1493

CVE-2025-52473

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-44518

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products, the same list as for CVE-2025-52473

Threats

Impact moderate

CVE-2026-46344

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products, the same list as for CVE-2025-52473

Threats

Impact moderate

References

16 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1215751	self
https://bugzilla.suse.com/1246301	self
https://bugzilla.suse.com/1267001	self
https://bugzilla.suse.com/1267007	self
https://www.suse.com/security/cve/CVE-2025-52473/	self
https://www.suse.com/security/cve/CVE-2026-44518/	self
https://www.suse.com/security/cve/CVE-2026-46344/	self
https://www.suse.com/security/cve/CVE-2025-52473	external
https://bugzilla.suse.com/1246301	external
https://www.suse.com/security/cve/CVE-2026-44518	external
https://bugzilla.suse.com/1267001	external
https://bugzilla.suse.com/1267007	external
https://www.suse.com/security/cve/CVE-2026-46344	external
https://bugzilla.suse.com/1267007	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for liboqs",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for liboqs fixes the following issues:\n\nChanges in liboqs:\n\nUpdated to 0.16.0:\n\n  Deprecation notice:\n\n  - SPHINCS+ was removed in 0.16.0.\n\n  Security issues:\n\n  - Fixed uninitialized `encaps_derand` pointer dereference\n  - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signature verification\n    (bsc#1267007 bsc#1267001)\n  - Fixed Integer underflow in CROSS `crypto_sign_open()`\n  - Fixed incorrect array size when calling `secure_clean`\n  - Implemented optimization barrier `OQS_MEM_BLACK_BOX` and applied to `ct_select` in FrodoKEM\n\n  Significant change:\n\n  FrodoKEM algorithm change:\n\n  * Existing FrodoKEM in 0.15.0 was renamed to ephemeral\n    FrodoKEM (`KEM_efrodokem_\u003c640|976|1344\u003e_\u003caes|shake\u003e`), and\n    the salted variant of FrodoKEM was added under the prior names\n    (`KEM_frodokem_\u003c640|976|1344\u003e_\u003caes|shake\u003e`).\n\n    Ephemeral FrodoKEM is recommended for applications\n    where each keypair will encapsulate only a small number\n    of shared secrets and ciphertexts. Standard (salted)\n    FrodoKEM is recommended for applications where each keypair\n    is expected to encapsulate large number of ciphertexts. Please consult\n    [upstream](https://github.com/microsoft/PQCrypto-LWEKE/#frodokem-learning-with-errors-key-encapsulation)\n    for more details.\n\n  * mldsa-native integration:\n\n    mldsa-native is a secure, fast, and portable C90 implementation of the\n    ML-DSA post-quantum signature standard. It also includes optimized\n    builds for x86_64 and aarch64. It is now the default implementation\n    behind `SIG_ml_dsa_\u003c44|65|87\u003e`.\n\n  * Updated HQC implementation:\n\n    The HQC implementations in liboqs were updated to 20250822\n    spec. Its upstream switched from PQClean to the [official\n    repo](https://gitlab.com/pqc-hqc/hqc). `KEM_hqc_\u003c1|3|5\u003e` is now enabled\n    by default.\n\n  * MQOM integration and memory-optimized build flag:\n\n    MQOM is a third-round candidate in NIST\u0027s Additional Digital\n    Signatures for the PQC Standardization Process. Portable,\n    x86_64-optimized, and memory-optimized implementations were\n    integrateinto liboqs under `OQS_ENABLE_SIG_MQOM`.\n\n\n  * OpenSSH implementation of NTRU Prime:\n\n    A public-domain OpenSSH implementation of NTRUPrime761\n    replaced the PQClean implementation as the default backend for\n    `KEM_ntruprime_sntrup761`.\n\n  Bug fixes:\n\n  - Fixed incremental absorption bug in AVX512VL SHA3-512 [#2442](https://github.com/open-quantum-safe/liboqs/pull/2442)\n  - Implemented fallback for when `EVP_DigestSqueeze` is unavailable [#2433](https://github.com/open-quantum-safe/liboqs/pull/2433)\n  - Added API for detecting stateful signature support at runtime [#2434](https://github.com/open-quantum-safe/liboqs/pull/2434)\n  - Fixed missing initialization and indexing bug in LMS [#2416](https://github.com/open-quantum-safe/liboqs/pull/2416)\n  - Fixed erroneous MAYO_OK despite failed sample_solution() attempts in MAYO [#2403](https://github.com/open-quantum-safe/liboqs/pull/2403)\n  - Limited pytest parallelism to prevent memory exhaustion in constrained environment [#2397](https://github.com/open-quantum-safe/liboqs/pull/2397)\n  - Fixed cuPQC ML-KEM derand symbol names and `#if/#elif` chains [#2396](https://github.com/open-quantum-safe/liboqs/pull/2396)\n  - Tightened Windows compiler detection [#2394](https://github.com/open-quantum-safe/liboqs/pull/2394)\n  - Fixed mismatched macros in LMS [#2379](https://github.com/open-quantum-safe/liboqs/pull/2379)\n  - Made fuzzers tolerant to disabled algorithms [#2359](https://github.com/open-quantum-safe/liboqs/pull/2359)\n  - Removed inlined exponentiation in CROSS-RSDPG-1 [#2357](https://github.com/open-quantum-safe/liboqs/pull/2357)\n  - Fixed incorrect arg register update in AVX512 Keccak [#2330](https://github.com/open-quantum-safe/liboqs/pull/2330)\n\n- Update to 0.15.0:\n  * Significant changes:\n    - Integrated SLH-DSA implementation from pq-code-package/slhdsa-c\n    - SLH-DSA ACVP tests (#2237)\n    - Integrate SLH-DSA-C Library (#2175)\n    - Added NTRU back (#2176)\n    - Removed all Dilithium implementations (#2275)\n    - Replaced SPHINCS+ with SLH-DSA for CMake build option\n      OQS_ALGS_ENABLED=STD (#2290)\n    - Updated CROSS to version 2.2 (#2247)\n    - Included DeriveEncapsulation functionality (#2221)\n    - Integrated ML-KEM implementation from ICICLE-PQC (#2216)\n  * Bug fixes:\n    - Fixed erroneously disabled LMS variants with build flag\n      OQS_ENABLE_SIG_STFL_LMS (#2310)\n    - Fixed incorrect import in OV-III-pkc_skc (#2299)\n    - Fixed incorrect actual signature length in signature full-cycle\n      speed test (#2293)\n    - Fixed ICICLE ML-KEM integration (#2288)\n    - Disabled strict aliasing on SPHINCS+-SHAKE (#2264)\n    - Fixed uninitialized length_encaps_seed for NTRU implementations (#2266)\n    - Changed 64 bit add to 32 bit add to wrap on 32 bit counter for\n      AES-CTR AES-NI implementation (#2252)\n    - Improved random number generator security (#2225)\n    - Added Classic McEliece sanitization patch (#2218)\n  * Miscellaneous:\n    - Deprecated noregress scripts (#2295)\n    - Updated no-pass explanation for constant-time testing (#2294)\n    - Re-enabled all ACVP tests (#2283)\n    - Updated license info for ML-KEM (#2250)\n    - Added Poutine SASL (#2213)\n    - Updated ACVP to 1.1.0.40 (#2172)\n    - Switched to dev mode for 0.14.1 (#2199)\n  * Deprecation notice: liboqs 0.15.0 is the last version to officially\n    support SPHINCS+. SPHINCS+ will be removed in the 0.16.0 release and\n    replaced by SLH-DSA. liboqs 0.15.0 also removes support for Dilithium.\n\nUpdated to 0.14.0:\n\n  * Key encapsulation mechanisms:\n    - HQC: Disabled compiler optimizations to avoid secret-dependent branching in certain configurations. HQC remains disabled by default.\n    - ML-KEM: Updated the default ML-KEM implementation to [PQCP\u0027s mlkem-native v1.0.0](https://github.com/pq-code-package/mlkem-native/releases/tag/v1.0.0).\n  * Digital signature schemes:\n    - New API: added an API function to check if a signature scheme supports signing with a context string.\n    - SNOVA: added [SNOVA](https://snova.pqclab.org/) from NIST Additional Signature Schemes Round 2.\n\n  * Other changes:\n     - Added an AVX512VL-optimized backend for SHA3.\n     - Improved memory management throughout the codebase.\n\n- CVE-2025-52473: Disabled compiler optimizations for HQC to avoid\n  secret-dependent branches. Thank you to Zhenzhi Lai and Zhiyuan Zhang\n  from from the University of Melbourne and the Max Planck Institute\n  for Security and Privacy for identifying the issue. (bsc#1246301)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-1493",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21634-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215751",
        "url": "https://bugzilla.suse.com/1215751"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246301",
        "url": "https://bugzilla.suse.com/1246301"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267001",
        "url": "https://bugzilla.suse.com/1267001"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267007",
        "url": "https://bugzilla.suse.com/1267007"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-52473 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-52473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44518 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44518/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46344 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46344/"
      }
    ],
    "title": "Security update for liboqs",
    "tracking": {
      "current_release_date": "2026-09-16T21:46:53Z",
      "generator": {
        "date": "2026-08-24T19:07:16Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21634-1",
      "initial_release_date": "2026-08-24T19:07:16Z",
      "revision_history": [
        {
          "date": "2026-08-24T19:07:16Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T21:46:53Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "liboqs-devel-0.16.0-160000.1.1.aarch64",
                "product": {
                  "name": "liboqs-devel-0.16.0-160000.1.1.aarch64",
                  "product_id": "liboqs-devel-0.16.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs-devel@0.16.0-160000.1.1?arch=aarch64\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "liboqs9-0.16.0-160000.1.1.aarch64",
                "product": {
                  "name": "liboqs9-0.16.0-160000.1.1.aarch64",
                  "product_id": "liboqs9-0.16.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs9@0.16.0-160000.1.1?arch=aarch64\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oqs-provider-0.11.0.32-160000.1.1.aarch64",
                "product": {
                  "name": "oqs-provider-0.11.0.32-160000.1.1.aarch64",
                  "product_id": "oqs-provider-0.11.0.32-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/oqs-provider@0.11.0.32-160000.1.1?arch=aarch64\u0026upstream=oqs-provider-0.11.0.32-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "liboqs-devel-0.16.0-160000.1.1.ppc64le",
                "product": {
                  "name": "liboqs-devel-0.16.0-160000.1.1.ppc64le",
                  "product_id": "liboqs-devel-0.16.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs-devel@0.16.0-160000.1.1?arch=ppc64le\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "liboqs9-0.16.0-160000.1.1.ppc64le",
                "product": {
                  "name": "liboqs9-0.16.0-160000.1.1.ppc64le",
                  "product_id": "liboqs9-0.16.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs9@0.16.0-160000.1.1?arch=ppc64le\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oqs-provider-0.11.0.32-160000.1.1.ppc64le",
                "product": {
                  "name": "oqs-provider-0.11.0.32-160000.1.1.ppc64le",
                  "product_id": "oqs-provider-0.11.0.32-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/oqs-provider@0.11.0.32-160000.1.1?arch=ppc64le\u0026upstream=oqs-provider-0.11.0.32-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "liboqs-devel-0.16.0-160000.1.1.s390x",
                "product": {
                  "name": "liboqs-devel-0.16.0-160000.1.1.s390x",
                  "product_id": "liboqs-devel-0.16.0-160000.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs-devel@0.16.0-160000.1.1?arch=s390x\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "liboqs9-0.16.0-160000.1.1.s390x",
                "product": {
                  "name": "liboqs9-0.16.0-160000.1.1.s390x",
                  "product_id": "liboqs9-0.16.0-160000.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs9@0.16.0-160000.1.1?arch=s390x\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oqs-provider-0.11.0.32-160000.1.1.s390x",
                "product": {
                  "name": "oqs-provider-0.11.0.32-160000.1.1.s390x",
                  "product_id": "oqs-provider-0.11.0.32-160000.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/oqs-provider@0.11.0.32-160000.1.1?arch=s390x\u0026upstream=oqs-provider-0.11.0.32-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "liboqs-devel-0.16.0-160000.1.1.x86_64",
                "product": {
                  "name": "liboqs-devel-0.16.0-160000.1.1.x86_64",
                  "product_id": "liboqs-devel-0.16.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs-devel@0.16.0-160000.1.1?arch=x86_64\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "liboqs9-0.16.0-160000.1.1.x86_64",
                "product": {
                  "name": "liboqs9-0.16.0-160000.1.1.x86_64",
                  "product_id": "liboqs9-0.16.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openquantumsafe:liboqs:0.16.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/liboqs9@0.16.0-160000.1.1?arch=x86_64\u0026upstream=liboqs-0.16.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oqs-provider-0.11.0.32-160000.1.1.x86_64",
                "product": {
                  "name": "oqs-provider-0.11.0.32-160000.1.1.x86_64",
                  "product_id": "oqs-provider-0.11.0.32-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/oqs-provider@0.11.0.32-160000.1.1?arch=x86_64\u0026upstream=oqs-provider-0.11.0.32-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs-devel-0.16.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64"
        },
        "product_reference": "liboqs-devel-0.16.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs-devel-0.16.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le"
        },
        "product_reference": "liboqs-devel-0.16.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs-devel-0.16.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x"
        },
        "product_reference": "liboqs-devel-0.16.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs-devel-0.16.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64"
        },
        "product_reference": "liboqs-devel-0.16.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs9-0.16.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64"
        },
        "product_reference": "liboqs9-0.16.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs9-0.16.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le"
        },
        "product_reference": "liboqs9-0.16.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs9-0.16.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x"
        },
        "product_reference": "liboqs9-0.16.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "liboqs9-0.16.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64"
        },
        "product_reference": "liboqs9-0.16.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oqs-provider-0.11.0.32-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64"
        },
        "product_reference": "oqs-provider-0.11.0.32-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oqs-provider-0.11.0.32-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le"
        },
        "product_reference": "oqs-provider-0.11.0.32-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oqs-provider-0.11.0.32-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x"
        },
        "product_reference": "oqs-provider-0.11.0.32-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oqs-provider-0.11.0.32-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
        },
        "product_reference": "oqs-provider-0.11.0.32-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-52473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-52473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-52473",
          "url": "https://www.suse.com/security/cve/CVE-2025-52473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246301 for CVE-2025-52473",
          "url": "https://bugzilla.suse.com/1246301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T19:07:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-52473"
    },
    {
      "cve": "CVE-2026-44518",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44518"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a signature buffer shorter than the expected signature size for the given parameter set, the implementation does not validate the caller-supplied length and proceeds to read past the end of the buffer. The out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44518",
          "url": "https://www.suse.com/security/cve/CVE-2026-44518"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267001 for CVE-2026-44518",
          "url": "https://bugzilla.suse.com/1267001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267007 for CVE-2026-44518",
          "url": "https://bugzilla.suse.com/1267007"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T19:07:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-44518"
    },
    {
      "cve": "CVE-2026-46344",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46344"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a correctly-sized signature buffer for the declared algorithm but a public key whose OID bytes (pk[0..3]) reference a different XMSS parameter set with a larger sig_bytes, the implementation re-parses the OID from the public key inside xmss_sign_open / xmssmt_sign_open and uses the resulting (larger) sig_bytes to index the caller-supplied signature buffer. As with CVE-2026-44518, the out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
          "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46344",
          "url": "https://www.suse.com/security/cve/CVE-2026-46344"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267007 for CVE-2026-46344",
          "url": "https://bugzilla.suse.com/1267007"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs-devel-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:liboqs9-0.16.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.aarch64",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.s390x",
            "openSUSE Leap 16.0:oqs-provider-0.11.0.32-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T19:07:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46344"
    }
  ]
}

CVE-2025-52473 (GCVE-0-2025-52473)

Vulnerability from cvelistv5 – Published: 2025-07-10 18:42 – Updated: 2025-07-10 19:16

Title

liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20

Summary

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-10 19:16 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/open-quantum-safe/liboqs/secur…	x_refsource_CONFIRM
https://github.com/open-quantum-safe/liboqs/commi…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
open-quantum-safe	liboqs	Affected: < 0.14.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-52473",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-10T19:16:24.879409Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-10T19:16:29.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "liboqs",
          "vendor": "open-quantum-safe",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.14.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-10T18:42:17.710Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm"
        },
        {
          "name": "https://github.com/open-quantum-safe/liboqs/commit/4215362acbf69b88fe1777c4c052f154e29f9897",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/commit/4215362acbf69b88fe1777c4c052f154e29f9897"
        }
      ],
      "source": {
        "advisory": "GHSA-qq3m-rq9v-jfgm",
        "discovery": "UNKNOWN"
      },
      "title": "liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-52473",
    "datePublished": "2025-07-10T18:42:17.710Z",
    "dateReserved": "2025-06-17T02:28:39.717Z",
    "dateUpdated": "2025-07-10T19:16:29.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-44518 (GCVE-0-2026-44518)

Vulnerability from cvelistv5 – Published: 2026-05-29 18:07 – Updated: 2026-05-29 18:41

Title

liboqs: XMSS Buffer Overread Bug

Summary

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a signature buffer shorter than the expected signature size for the given parameter set, the implementation does not validate the caller-supplied length and proceeds to read past the end of the buffer. The out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 18:40 UTC

CWE

CWE-20 - Improper Input Validation
CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/open-quantum-safe/liboqs/secur…	x_refsource_CONFIRM
https://github.com/open-quantum-safe/liboqs/commi…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
open-quantum-safe	liboqs	Affected: < 0.16.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44518",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T18:40:40.107815Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T18:41:01.927Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "liboqs",
          "vendor": "open-quantum-safe",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.16.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a signature buffer shorter than the expected signature size for the given parameter set, the implementation does not validate the caller-supplied length and proceeds to read past the end of the buffer. The out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-29T18:07:07.107Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-wf7v-fhxj-73m2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-wf7v-fhxj-73m2"
        },
        {
          "name": "https://github.com/open-quantum-safe/liboqs/commit/ef70dea7c85e5637f37828d75e5b9bb29dbfe513",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/commit/ef70dea7c85e5637f37828d75e5b9bb29dbfe513"
        }
      ],
      "source": {
        "advisory": "GHSA-wf7v-fhxj-73m2",
        "discovery": "UNKNOWN"
      },
      "title": "liboqs: XMSS Buffer Overread Bug"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44518",
    "datePublished": "2026-05-29T18:07:07.107Z",
    "dateReserved": "2026-05-06T18:28:20.888Z",
    "dateUpdated": "2026-05-29T18:41:01.927Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46344 (GCVE-0-2026-46344)

Vulnerability from cvelistv5 – Published: 2026-05-29 18:08 – Updated: 2026-05-29 18:39

Title

liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)

Summary

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a correctly-sized signature buffer for the declared algorithm but a public key whose OID bytes (pk[0..3]) reference a different XMSS parameter set with a larger sig_bytes, the implementation re-parses the OID from the public key inside xmss_sign_open / xmssmt_sign_open and uses the resulting (larger) sig_bytes to index the caller-supplied signature buffer. As with CVE-2026-44518, the out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 18:39 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/open-quantum-safe/liboqs/secur…	x_refsource_CONFIRM
https://github.com/open-quantum-safe/liboqs/commi…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
open-quantum-safe	liboqs	Affected: < 0.16.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-46344",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T18:39:44.149887Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T18:39:53.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "liboqs",
          "vendor": "open-quantum-safe",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.16.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a correctly-sized signature buffer for the declared algorithm but a public key whose OID bytes (pk[0..3]) reference a different XMSS parameter set with a larger sig_bytes, the implementation re-parses the OID from the public key inside xmss_sign_open / xmssmt_sign_open and uses the resulting (larger) sig_bytes to index the caller-supplied signature buffer. As with CVE-2026-44518, the out-of-bounds bytes are consumed only as input to an internal hash computation and are not returned to the caller, so no oracle exists to leak their contents to an attacker. The primary observable effect is a possible crash (denial of service) of the verifying process if the read crosses into an unmapped memory page. This vulnerability is fixed in 0.16.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-29T18:08:02.984Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-2wxh-55qf-c7wg",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-2wxh-55qf-c7wg"
        },
        {
          "name": "https://github.com/open-quantum-safe/liboqs/commit/077e32a94f39af02209dbbc680bf8a43b774b305",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-quantum-safe/liboqs/commit/077e32a94f39af02209dbbc680bf8a43b774b305"
        }
      ],
      "source": {
        "advisory": "GHSA-2wxh-55qf-c7wg",
        "discovery": "UNKNOWN"
      },
      "title": "liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-46344",
    "datePublished": "2026-05-29T18:08:02.984Z",
    "dateReserved": "2026-05-13T18:37:30.990Z",
    "dateUpdated": "2026-05-29T18:39:53.946Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:21634-1

CVE-2025-52473 (GCVE-0-2025-52473)

CVE-2026-44518 (GCVE-0-2026-44518)

CVE-2026-46344 (GCVE-0-2026-46344)

Tags

Sightings

Nomenclature

Related by attack behaviour