Cypherpunks develops cryptographic and privacy-focused messaging tools, centered on the libotr library and its integration into instant-messaging clients such as Pidgin, where vulnerabilities have clustered around memory-safety issues including buffer-boundary violations and format-string weaknesses. This is a niche vendor profile; current vulnerability counts and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cypherpunks over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-2851CRITICAL Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arb | Apr 7, 2016 | 9.8 | 58 | NO | YES |
CVE-2015-8833CRITICAL Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attacke | Apr 12, 2016 | 9.8 | 33 | NO | NO |
CVE-2012-2369HIGH Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attack | May 23, 2012 | 7.5 | 26 | NO | NO |
CVE-2012-3461MEDIUM The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/par | Aug 20, 2012 | 4.3 | 18 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cypherpunks.
Media articles that mention a CVE ID that affects a product developed by Cypherpunks — matched by CVE ID, not by vendor name.