P11-glue vulnerabilities
We track 1 vulnerability in P11-glue products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest P11-glue vulnerabilities
- 7.5 High severity
p11-kit: Access of Uninitialized Pointer
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to re