CVE-2026-104267 | randombit Botan up to 3.12.x Scrypt implementation heap-based overflow

November 7, 2026 Yanac

A vulnerability was found in randombit Botan up to 3.12.x. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Scrypt implementation. This manipulation causes heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-104267. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More