PT-2023-31717

CVE-2023-50979

Published

2023-12-18

Updated

2026-01-14

CVSS 3.1

5.9

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Crypto++ versions through 8.9.0

Description The issue is related to a Marvin side channel during decryption with PKCS#1 v1.5 padding.

Recommendations For versions through 8.9.0, update to a version that contains a fix for this issue to prevent exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

OPENSUSE-SU-2026:10047-1

SUSE-SU-2025:4310-1

SUSE-SU-2025_4310-1

Found an issue in the description? Have something to add? Feel free to write us 👾