CVE-2025-52473
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-52473
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-52473.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-52473
- Aliases
-
- GHSA-qq3m-rq9v-jfgm
- Downstream
- Related
- Published
- 2025-07-10T19:15:25Z
- Modified
- 2025-07-15T14:52:14.031085Z
- Summary
- [none]
- Details
-
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0.
- References