Bug 2453209 (CVE-2026-32877)

Summary: CVE-2026-32877 Botan: Botan: Denial of Service via heap over-read during SM2 decryption
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Botan, a C++ cryptography library. During SM2 decryption, the library failed to validate the length of the authentication code value (C3) before comparison. A remote attacker could exploit this by providing a specially crafted invalid ciphertext, leading to a heap over-read of up to 31 bytes. This can result in a denial of service due to a crash or other undefined behavior.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2453766, 2453762, 2453763, 2453764, 2453765, 2453767    
Bug Blocks:    

Description OSIDB Bzimport 2026-03-30 21:02:44 UTC 
Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0.