Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Openquantumsafe

First CVE: May 24, 2024Active for: 2 yearsTotal CVEs: 7

Open Quantum Safe maintains liboqs, a narrowly scoped but strategically important cryptographic library that integrates post-quantum algorithm implementations into applications across research, infrastructure, and emerging quantum-safe deployment efforts. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, and recur through weakness classes including sensitive-information exposure, out-of-bounds reads, timing-channel side channels, and cryptographic algorithm weaknesses that reflect the complexity of novel post-quantum primitives and their constant-time implementation demands. Defenders tracking quantum-safe migration should inventory products that depend on liboqs and treat this library's security advisories as high-priority given the cryptographic trust boundary it occupies; live severity and exploitation figures are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
2.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 90% of tracked vendors
6.4
Avg CVSS Score
Higher Avg CVSS Score than 38% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Openquantumsafe over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 24, 2024
2 years ago
Most Recent CVE
May 29, 2026
58 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-31510CRITICAL
An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-
May 24, 20249.830NONO
CVE-2026-46344MEDIUM
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in th
May 29, 20265.325NONO
CVE-2026-44518MEDIUM
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in th
May 29, 20265.325NONO
CVE-2024-36405HIGH
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference
Jun 10, 20247.522NONO
CVE-2024-54137HIGH
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference impleme
Dec 6, 20247.521NONO
CVE-2025-52473MEDIUM
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the r
Jul 10, 20255.517NONO
CVE-2025-48946LOW
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the HQC algorithm, an al
May 30, 20253.714NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
14%
43%
29%
14%
Severity distribution among all CVEs352,713 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (14.3%)
Network6 (85.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High1 (14.3%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None6 (85.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Openquantumsafe.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Openquantumsafe — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Openquantumsafe's Products

View all 2 CNAs →

Top CWEs