CVE-2026-47738 | open-quantum-safe liboqs up to 0.15.x KEM src/kem/kem.c OQS_KEM_encaps_derand uninitialized variable

A vulnerability was found in open-quantum-safe liboqs up to 0.15.x. It has been rated as problematic. This affects the function OQS_KEM_encaps_derand of the file src/kem/kem.c of the component KEM. Performing a manipulation results in use of uninitialized variable.

This vulnerability is cataloged as CVE-2026-47738. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More