Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-30 | 2 | Disclosure2 |
| 2026-03-31 | 1 | Disclosure1 |
CVE-2026-32877 Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) fail… https://www.cve.org/CVERecord?id=CVE-2026-32877
Post summary
CVE-2026-32877 reveals a flaw in Botan’s SM2 decryption where the authentication code (C3) check fails for versions 2.3.0 through before 3.11.0.
🟠 CVE-2026-32877 - High Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the enco... https://www.thehackerwire.com/vulnerability/CVE-2026-32877/ https://t.co/ynNXPd5lWs
Post summary
The post details a critical SM2 authentication check flaw in Botan versions 2.3.0‑3.10.x, but offers no PoC, exploit code, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32877 - Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field Intel Report: https://ift.tt/dnORUfm
Post summary
New CVE‑2026‑32877 is announced, describing a heap buffer over‑read in Botan’s SM2 decryption due to an undersized C3 hash field, with no PoC, exploit, or patch details shared.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | botan_project | botan | - | - | - |