Openquantumsafe Liboqs — known CVE vulnerabilities

Every CVE whose affected-product data names Openquantumsafe Liboqs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-31510 — CVSS 9.8 (critical): An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the…
• CVE-2024-54137 — CVSS 7.4 (high): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has…
• CVE-2024-36405 — CVSS 5.9 (medium): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing…
• CVE-2025-52473 — CVSS 5.9 (medium): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple…
• CVE-2026-46344 — CVSS 5.3 (medium): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an…
• CVE-2026-44518 — CVSS 5.3 (medium): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an…
• CVE-2025-48946 — CVSS 3.7 (low): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version…