Botan
Vendor:
First CVE: May 13, 2016 · Active for 10 years
35
Total CVEs
More Total CVEs than 96% of tracked products
3.9
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Botan over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 13, 2016
10 years ago
Most Recent CVE
May 27, 2026
58 days ago
CVE Severity & Scoring
Botan35 CVEs
29%
43%
29%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (8.6%)
Network32 (91.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low28 (80.0%)
High7 (20.0%)
Unknown0 (0.0%)
User Interaction
None35 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (2.9%)
High0 (0.0%)
None34 (97.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (35 CVEs).
35 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-2195CRITICAL Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a | May 13, 2016 | 9.8 | 32 | NO | NO |
CVE-2026-34582CRITICAL Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being receive | Apr 7, 2026 | 9.1 | 31 | NO | NO |
CVE-2016-6878CRITICAL The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined beh | Apr 10, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-2196CRITICAL Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execu | May 13, 2016 | 9.8 | 31 | NO | NO |
CVE-2021-24115CRITICAL In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex). | Feb 22, 2021 | 9.8 | 30 | NO | NO |
CVE-2016-9132CRITICAL In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the ret | Jan 30, 2017 | 9.8 | 30 | NO | NO |
CVE-2022-43705CRITICAL In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016). | Nov 27, 2022 | 9.1 | 29 | NO | NO |
CVE-2015-7826CRITICAL botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate, as | Apr 10, 2017 | 9.8 | 29 | NO | NO |
CVE-2026-34580HIGH Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a | Apr 7, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-32877HIGH Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check th | Mar 30, 2026 | 8.2 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (35 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (35 CVEs).
Media Mentions
Signals from CVEs in this product scope (35 CVEs).
Top CNAs Publishing CVEs For Botan
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.11.0 | 1 | 7.5 | 0.3% | 0 | 0 |
| 2.2.0 | 1 | 5.5 | 0.3% | 0 | 0 |
| 2.1.0 | 1 | 5.5 | 0.3% | 0 | 0 |
| 2.0.1 | 2 | 7.7 | 0.8% | 0 | 0 |
| 2.0.0 | 1 | 5.5 | 0.3% | 0 | 0 |
| 1.9.9 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.8 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.7 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.6 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.5 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.4 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.3 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.2 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.18 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.17 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.16 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.15 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.14 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.13 | 1 | 9.8 | 2.0% | 0 | 0 |
| 1.9.12 | 1 | 9.8 | 2.0% | 0 | 0 |