GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-34610 (GCVE-0-2026-34610)

Vulnerability from cvelistv5 – Published: 2026-04-02 17:54 – Updated: 2026-04-03 17:25
VLAI
Title
leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation
Summary
The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim's CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim's CN length. The first N bytes of the attacker's CN are the victim's identity. After parsing, the attacker's certificate has an identical CN to the victim's — enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1.
Severity
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-03 17:03 UTC
CWE
  • CWE-681 - Incorrect Conversion between Numeric Types
Assigner
References
Impacted products
Vendor Product Version CPE status
smuellerDD leancrypto Affected: < 1.7.1
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34610",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T17:03:26.975851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T17:25:10.195Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "leancrypto",
          "vendor": "smuellerDD",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.7.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim\u0027s CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim\u0027s CN length. The first N bytes of the attacker\u0027s CN are the victim\u0027s identity. After parsing, the attacker\u0027s certificate has an identical CN to the victim\u0027s \u2014 enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-681",
              "description": "CWE-681: Incorrect Conversion between Numeric Types",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T17:54:53.250Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr"
        },
        {
          "name": "https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a"
        },
        {
          "name": "https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1"
        }
      ],
      "source": {
        "advisory": "GHSA-636g-jxv4-v4gr",
        "discovery": "UNKNOWN"
      },
      "title": "leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34610",
    "datePublished": "2026-04-02T17:54:53.250Z",
    "dateReserved": "2026-03-30T17:15:52.500Z",
    "dateUpdated": "2026-04-03T17:25:10.195Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-34610",
      "date": "2026-09-17",
      "epss": "0.00162",
      "percentile": "0.05864"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-34610\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-02T18:16:32.567\",\"lastModified\":\"2026-07-24T21:10:00.143\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim\u0027s CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim\u0027s CN length. The first N bytes of the attacker\u0027s CN are the victim\u0027s identity. After parsing, the attacker\u0027s certificate has an identical CN to the victim\u0027s \u2014 enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1.\"},{\"lang\":\"es\",\"value\":\"La biblioteca leancrypto es una biblioteca criptogr\u00e1fica que contiene exclusivamente algoritmos criptogr\u00e1ficos resistentes a PQC. Antes de la versi\u00f3n 1.7.1, lc_x509_extract_name_segment() realiza un \u0027cast\u0027 de size_t vlen a uint8_t al almacenar la longitud del Nombre Com\u00fan (CN). Un atacante que elabora un certificado con CN = CN de la v\u00edctima + relleno de 256 bytes obtiene cn_size = (uint8_t)(256 + N) = N, donde N es la longitud del CN de la v\u00edctima. Los primeros N bytes del CN del atacante son la identidad de la v\u00edctima. Despu\u00e9s del an\u00e1lisis, el certificado del atacante tiene un CN id\u00e9ntico al de la v\u00edctima - lo que permite la suplantaci\u00f3n de identidad en la verificaci\u00f3n PKCS#7, la coincidencia de cadenas de certificados y la firma de c\u00f3digo. Este problema ha sido parcheado en la versi\u00f3n 1.7.1.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"smuellerDD\",\"product\":\"leancrypto\",\"versions\":[{\"version\":\"\u003c 1.7.1\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-03T17:03:26.975851Z\",\"id\":\"CVE-2026-34610\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-681\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:leancrypto:leancrypto:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.7.1\",\"matchCriteriaId\":\"EEBE3140-06FC-43FD-B7D3-D96E65CD4B38\"}]}]}],\"references\":[{\"url\":\"https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-06-28T11:06:56+00:00",
      "cve": "CVE-2026-34610",
      "id": "CVE-2026-34610",
      "initial_release_date": "2026-04-02T17:54:53.250000+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "leancrypto: leancrypto: Identity impersonation via integer overflow in X.509 Common Name processing",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34610.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:26:20Z",
      "cve": "CVE-2026-34610",
      "id": "CVE-2026-34610",
      "initial_release_date": "2026-04-03T23:25:02Z",
      "product_status:known_affected": "394",
      "product_status:recommended": "31",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-34610",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-34610.json",
      "version": "8"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34610\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-03T17:03:26.975851Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-03T17:25:03.484Z\"}}], \"cna\": {\"title\": \"leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation\", \"source\": {\"advisory\": \"GHSA-636g-jxv4-v4gr\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"smuellerDD\", \"product\": \"leancrypto\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 1.7.1\"}]}], \"references\": [{\"url\": \"https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr\", \"name\": \"https://github.com/smuellerDD/leancrypto/security/advisories/GHSA-636g-jxv4-v4gr\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a\", \"name\": \"https://github.com/smuellerDD/leancrypto/commit/5cdcbe12bd6c3d6e87e969972a580b44a74c3a6a\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1\", \"name\": \"https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.1\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when storing the Common Name (CN) length. An attacker who crafts a certificate with CN = victim\u0027s CN + 256 bytes padding gets cn_size = (uint8_t)(256 + N) = N, where N is the victim\u0027s CN length. The first N bytes of the attacker\u0027s CN are the victim\u0027s identity. After parsing, the attacker\u0027s certificate has an identical CN to the victim\u0027s \\u2014 enabling identity impersonation in PKCS#7 verification, certificate chain matching, and code signing. This issue has been patched in version 1.7.1.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-681\", \"description\": \"CWE-681: Incorrect Conversion between Numeric Types\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-02T17:54:53.250Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-34610\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-03T17:25:10.195Z\", \"dateReserved\": \"2026-03-30T17:15:52.500Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-02T17:54:53.250Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.