PT-2026-60591

CVE-2026-15997

·

Published

2026-07-16

·

Updated

2026-10-24

Description by

CVSS 4.0
1.7
Low
MetricsAV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/S:P/AU:N/R:A/V:D/RE:M/U:Amber
Name of the Vulnerable Software and Affected Versions BC-LTS versions 2.73.0 through 2.73.12.0
Description An out-of-bounds write issue in the bcprov-lts8on component on ARM architecture can lead to buffer overflows. This occurs when an application accepts memoable SHA3 or SHAKE states from potentially untrusted sources. The issue is linked to the shake.C and sha3.C files.
Recommendations Update BC-LTS to version 2.73.12.1. Avoid accepting memoable SHA3 or SHAKE states from untrusted sources as a mitigation measure.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2026-15997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com