// Security advisory · Fixed upstream
Duplicate NULL-check correction in oqsx_get_hybrid_params(). Fix contributed as upstream PR #767, merged and credited.
In oqsx_get_hybrid_params() (oqs_kmgmt.c) a copy-paste error checked key->comp_privkey twice and never checked key->privkey. A hybrid key without a private component passed the guard that was meant to stop it.
Invalid memory use while extracting hybrid key parameters, reachable through the key-management entry points of the provider. Reported privately together with the sibling double free in oqs_sig_dupctx().
PR #767 replaces the duplicate check with the intended key->privkey != NULL. Submitted at the maintainers’ request from the advisory thread, merged upstream on 13 Apr 2026. No CVE was requested by the project.
Reported and fixed by Eva Crystal (iiviel / 0xiviel), XSource Security.
Integer underflow of mlen in crypto_sign_open() in the CROSS reference implementation leads to a heap buffer overflow during signature verification.
Insufficient protection of serialized SSL session/context data can lead to memory-safety issues when restoring tampered or corrupted state. Credited jointly with Haruto Kimura (Stella).
FFDH key exchange lacks contributory-behaviour / peer-key validation, enabling protocol-level abuse. Found independently by Eva Crystal (0xiviel).
Out-of-bounds read in mbedtls_ccm_finish(): an oversized tag_len in the multipart CCM API exposes adjacent CCM context data. Discovered through the Intigriti Trusted Firmware program.
