CVE-2026-44378
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 27, 2026
Vendor
unknown
Description
Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.