CROSS-implementation vulnerabilities

1 known vulnerability in CROSS-implementation from CROSS-signature. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CROSS-implementation: Stack-based Buffer Overflow

  CVE-2026-41509May 8, 2026CROSS-signature

  CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused by an underflow of the integer mlen. This issue has been patch