CVE-2026-118769
randombit botan
- randombit botan
- Critical
- CVSS 9.2
- No fixed version listed
Summary
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check.
From the CVE record.
Read the original description
CVE record
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select the variable-block-size Lion cipher so that the reported size is truncated, the caller allocates insufficient memory, and later block processing causes memory corruption. The C++ API and normally used C API modes such as CBC and CTR are unaffected. This issue is fixed in version 3.13.0.
What to do
No fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| randombit botan | >= 2.1.0, < 3.13.0 | None listed |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.2 (v4.0, scored by GitHub_M)
- Weakness
- CWE-125: Out-of-bounds Read; CWE-681: Incorrect Conversion between Numeric Types; CWE-787: Out-of-bounds Write
- Vendor
- randombit, botan
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.