CyberSecBulletin

Rambus vulnerabilities

We track 2 vulnerabilities in Rambus products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 22, 2023.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Rambus vulnerabilities

  • 7.5 High severity

    Matrixssl: Integer Overflow or Wraparound

    CVE-2023-24609Matrixssl

    Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. An attacked device calculates an SHA-2 hash over at least 65 KB (in RAM). With a large numbe

  • 9.1 Critical severity

    Safezone Basic Crypto Module: Use of Insufficiently Random Values

    CVE-2022-26320Rambus

    The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can b