Botan

Vendor:

First CVE: May 13, 2016 · Active for 10 years

35
Total CVEs
More Total CVEs than 96% of tracked products
3.9
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Botan over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 13, 2016
10 years ago
Most Recent CVE
May 27, 2026
58 days ago

CVE Severity & Scoring

Botan35 CVEs
All CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local3 (8.6%)
Network32 (91.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low28 (80.0%)
High7 (20.0%)
Unknown0 (0.0%)
User Interaction
None35 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (2.9%)
High0 (0.0%)
None34 (97.1%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (35 CVEs).

35 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a
May 13, 20169.832NONO
Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being receive
Apr 7, 20269.131NONO
The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined beh
Apr 10, 20179.831NONO
Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execu
May 13, 20169.831NONO
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
Feb 22, 20219.830NONO
In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the ret
Jan 30, 20179.830NONO
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
Nov 27, 20229.129NONO
botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate, as
Apr 10, 20179.829NONO
Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a
Apr 7, 20267.528NONO
Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check th
Mar 30, 20268.228NONO

Exploit Exposure

Signals from CVEs in this product scope (35 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (35 CVEs).

Media Mentions

Signals from CVEs in this product scope (35 CVEs).

Top CNAs Publishing CVEs For Botan

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
3.11.017.50.3%00
2.2.015.50.3%00
2.1.015.50.3%00
2.0.127.70.8%00
2.0.015.50.3%00
1.9.919.82.0%00
1.9.819.82.0%00
1.9.719.82.0%00
1.9.619.82.0%00
1.9.519.82.0%00
1.9.419.82.0%00
1.9.319.82.0%00
1.9.219.82.0%00
1.9.1819.82.0%00
1.9.1719.82.0%00
1.9.1619.82.0%00
1.9.1519.82.0%00
1.9.1419.82.0%00
1.9.1319.82.0%00
1.9.1219.82.0%00