base_C_MessageEncryptInit · P11 Kit: Global-buffer-overflow
Affects p11-kitSource GCVE Database
Rated by Threat Radar
Data as of 7 Aug 2026, 00:31 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzp11-kitpkg:generic/p11-kitOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until a fix is available, users should monitor official p11-kit repositories and OSS-Fuzz for updates.
Description
A global buffer overflow vulnerability has been identified in the p11-kit project within the function base_C_MessageEncryptInit. The issue was discovered through OSS-Fuzz and involves an out-of-bounds read of 8 bytes. No CVSS score is available, and no known exploits have been reported in the wild. The affected versions include the commit identified by hash 7fe7e5d95d9197e7f52aab314468d424acc6ac88 and later. No patch or remediation information is provided in the available data.