CROSS-signature vulnerabilities
We track 1 vulnerability in CROSS-signature products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest CROSS-signature vulnerabilities
- 9.8 Critical severity
CROSS-implementation: Stack-based Buffer Overflow
CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused by an underflow of the integer mlen. This issue has been patch