🛡️ OESA-2026-1322 — opencryptoki (CVE-2024-0914)
Description
opencryptoki security update
openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices.
Security Fix(es):
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914)
Affected software
OESA-2026-1322 is recorded against 1 package.
- opencryptoki (fixed in 3.10.0-3.oe2003sp4)
Timeline and source
Published on 6 February 2026 and last revised on 25 April 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.
References
Details
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| opencryptoki | — | 3.10.0-3.oe2003sp4 |
References
Similar Threats
- Unknown ALSA-2026:28256
- Unknown ALSA-2026:26352
- Medium CVE-2026-40253
- Unknown CLSA-2026-1775212043
- Unknown CLSA-2026-1774952276
Vulnerability Monitoring
Track new vulnerabilities in opencryptoki
OESA-2026-1322 is rated CVSS 5.0 Medium. BotEraser monitors your WordPress installation and notifies you when software you use appears in our vulnerability database.
Set Up Free Alerts →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.