Botan Project maintains a cryptographic library widely embedded across server applications and security-sensitive infrastructure, despite its focused product scope. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes, reflecting the cryptographic and certificate-handling operations that anchor the library's role in authentication and encryption workflows. The recurring exposure centers on weakness classes including improper certificate validation, information disclosure, and memory-safety issues such as buffer overflows and improper input validation, each of which can undermine the trust guarantees that dependent applications rely upon. Defenders should treat Botan library updates as high-priority, particularly when the vendor publishes fixes for certificate-validation or authentication-layer flaws, and should inventory downstream products that embed this library rather than tracking the library in isolation. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Botan Project over time
Signals from CVEs in this vendor scope (35 CVEs).
35 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-2195CRITICAL Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a | May 13, 2016 | 9.8 | 32 | NO | NO |
CVE-2026-34582CRITICAL Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being receive | Apr 7, 2026 | 9.1 | 31 | NO | NO |
CVE-2016-6878CRITICAL The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined beh | Apr 10, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-2196CRITICAL Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execu | May 13, 2016 | 9.8 | 31 | NO | NO |
CVE-2021-24115CRITICAL In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex). | Feb 22, 2021 | 9.8 | 30 | NO | NO |
CVE-2016-9132CRITICAL In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the ret | Jan 30, 2017 | 9.8 | 30 | NO | NO |
CVE-2022-43705CRITICAL In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016). | Nov 27, 2022 | 9.1 | 29 | NO | NO |
CVE-2015-7826CRITICAL botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate, as | Apr 10, 2017 | 9.8 | 29 | NO | NO |
CVE-2026-34580HIGH Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a | Apr 7, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-32877HIGH Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check th | Mar 30, 2026 | 8.2 | 28 | NO | NO |
Signals from CVEs in this vendor scope (35 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Botan Project.
Media articles that mention a CVE ID that affects a product developed by Botan Project — matched by CVE ID, not by vendor name.