CVE-2026-104254 | open-quantum-safe liboqs up to 0.16.0 Signature Verification hss_verify_inc.c hss_validate_signature_init denial of service

A vulnerability, which was classified as problematic, has been found in open-quantum-safe liboqs up to 0.16.0. The impacted element is the function hss_validate_signature_init of the file src/sig_stfl/lms/external/hss_verify_inc.c of the component Signature Verification. Performing a manipulation results in denial of service.

This vulnerability was named CVE-2026-104254. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More