CVE-2026-104267

Name of the Vulnerable Software and Affected Versions Botan versions 2.7.0 through 3.12.x

Description The Scrypt implementation on 32-bit platforms contains an integer overflow during memory calculation due to unchecked multiplication. This allows an attacker to provide specific Scrypt parameters that wrap the allocation size, resulting in a buffer smaller than the data subsequently written. This affects systems that accept arbitrary parameters from hostile sources, such as applications decrypting attacker-supplied encrypted private keys. A triggering parameter set can cause approximately four gigabytes of data to be written past the allocated heap buffer, leading to a process crash and denial of service. While arbitrary code execution is not demonstrated, it cannot be entirely excluded.

Recommendations Update to version 3.13.0.