P11-kit Project P11-kit — known CVE vulnerabilities

Every CVE whose affected-product data names P11-kit Project P11-kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-29361 — CVSS 7.5 (high): An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the…
• CVE-2020-29363 — CVSS 7.5 (high): An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by…
• CVE-2026-13757 — CVSS 6.2 (medium): A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_a…
• CVE-2020-29362 — CVSS 5.3 (medium): An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by…
• CVE-2026-2100 — CVSS 5.3 (medium): A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with…