p11-kit_project has 4 CVEs on record between 2020 and 2026. The median CVSS is 6.4 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2020-29363High· 7.5An issue was discovered in p11-kit 0.23.6 through 0.23.2142CVE-2020-29361High· 7.5An issue was discovered in p11-kit 0.21.1 through 0.23.2142CVE-2020-29362Medium· 5.3An issue was discovered in p11-kit 0.21.1 through 0.23.2130CVE-2026-2100Medium· 5.3A flaw was found in p11-kit29
p11-kit_project vulnerabilities
CVEs affecting p11-kit_project, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-2100Medium· 5.3A flaw was found in p11-kit
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-…
CVE-2020-29363High· 7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized b…
CVE-2020-29362Medium· 5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte arr…
CVE-2020-29361High· 7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling rea…