Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how opencryptoki project compares to other vendors in security performance

View Risk Score →

Opencryptoki opencryptokiopenCryptoki has improper link resolution before file access (link following)

Risk 44
Severity
6.8
EPSS
0.01%
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Last updated 1 September 2026

1 / 2
Source: Ubuntu
First published (updated )
CVE-2026-23893

Opencryptoki opencryptokiopenCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c

Risk 49
Severity
6.8
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Last updated 1 September 2026

1 / 2
Source: Ubuntu
First published (updated )
CVE-2026-40253

Opencryptoki opencryptokiopenCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP

Risk 37
Severity
6.6
EPSS
0.01%
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Last updated 1 September 2026

1 / 2
Source: Ubuntu
First published (updated )
CVE-2026-22791

Opencryptoki Project OpencryptokiopenCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files…

Risk 53
Severity
6.2
AV:L/AC:H/Au:N/C:C/I:C/A:C

openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptokistdll file in /var/lock/.

First published (updated )
CVE-2012-4455

Opencryptoki Project OpencryptokiOpencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

Risk 38
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.

1 / 2
Source: NVD
First published (updated )
CVE-2024-0914

Opencryptoki Project OpencryptokiInfoleak

Risk 33
Severity
5.5
Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via CCreateObject, nor when CDeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

1 / 2
Source: MITRE
First published (updated )
CVE-2021-3798

Opencryptoki Project OpencryptokiopenCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable …

Risk 17
Severity
2.9
AV:A/AC:M/Au:N/C:N/I:P/A:N

openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapixpk or (2) .pkcs11spinloc file in /tmp.

1 / 2
First published (updated )
CVE-2012-4454

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203