Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim's CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim's CN length. The first N bytes of the attacker's CN are the victim's identity. After parsing, the attacker's certificate has an identical CN to the victim's — enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34610 The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_… https://www.cve.org/CVERecord?id=CVE-2026-34610
Post summary
CVE‑2026‑34610 is disclosed for the leancrypto library’s lc_x509_extract_name function; upgrading to version 1.7.1 resolves the vulnerability.
🚨*CVE* CVE-2026-34610 The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_… https://www.cve.org/CVERecord?id=CVE-2026-34610 ----- Traducción: CVE-2026-34610 La … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑34610 for the leancrypto library, noting a vulnerable function prior to version 1.7.1 and linking to the CVE record, but offers minimal detail beyond the disclosure.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | leancrypto | leancrypto | - | - | - |