Rambus develops cryptographic and security modules focused on TLS toolkits and hardware-based crypto implementations, with a narrow but specialized product footprint. The durable signal in its disclosures centers on integer-overflow and insufficient-randomness issues characteristic of cryptographic and numeric-handling code. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Rambus over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-26320CRITICAL The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices throu | Mar 14, 2022 | 9.1 | 27 | NO | NO |
CVE-2023-24609HIGH Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. An attacked | Dec 22, 2023 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Rambus.
Media articles that mention a CVE ID that affects a product developed by Rambus — matched by CVE ID, not by vendor name.