Information Disclosure

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm…CVE-2015-2141Cryptopp · 2.9% likely

   CWE-200

2. Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key length, which may cause…CVE-2021-43398Cryptopp · 2.1% likely

   CWE-203

3. Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use,…CVE-2016-7420Cryptopp · 2.0% likely

   CWE-200

4. The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compile…CVE-2016-3995Cryptopp · 1.9% likely

   CWE-200

5. Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.CVE-2023-50979Cryptopp · 0.6% likely

   CWE-203

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.