CVE-2023-36326

    Dashboard / Vulnerabilities / CVE-2023-36326

    CVE-2023-36326

    Published: 1 Sept 2023Last Modified: 12 Aug 2026

    Summary:

    Details: Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function.

    References: https://groups.google.com/g/relic-discuss/c/A_J2-ArVIAo/m/qgFiXsUJBQAJ?utm_medium=email&utm_source=footer, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36326.json, https://nvd.nist.gov/vuln/detail/CVE-2023-36326, https://github.com/relic-toolkit/relic/commit/34580d840469361ba9b5f001361cad659687b9ab

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -34580d840469361ba9b5f001361cad659687b9ab

    Affected versions

    0.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-36326 | CVE-DB