p11-kit vulnerabilities

1 known vulnerability in p11-kit from P11-glue. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  p11-kit: Access of Uninitialized Pointer

  CVE-2026-2100Mar 26, 2026P11-glueEPSS 1.34%

  A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to re