p11-kit vulnerabilities
CVEs whose affected-version data names the p11-kit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-13757Medium· 6.2A flaw was found in p11-kit
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing n…
CVE-2026-2100Medium· 5.3A flaw was found in p11-kit
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-…
CVE-2020-29363High· 7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized b…
CVE-2020-29362Medium· 5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte arr…
CVE-2020-29361High· 7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling rea…