CryptX vulnerabilities

2 known vulnerabilities in CryptX from MIK. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CryptX: Stack-based Buffer Overflow

  CVE-2026-41565May 28, 2026MIK

  CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication

• 7.5 High severity

  CryptX: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

  CVE-2026-41564Apr 23, 2026MIK

  CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors a