PatchTheCVElibtommath vulnerabilities and fixes
Recent CVEs affecting libtommath, with upgrade or downgrade steps. 1 tracked.
libtommath has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-09-01. Highest priority: CVE-2023-36328 (score 57/100).
- CVE-2023-36328 CRITICAL 9.8 UPGRADE MITIGATE Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d
FAQ
How do I fix libtommath vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libtommath being exploited right now?
None of the tracked libtommath CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libtommath CVE should I patch first?
CVE-2023-36328 currently ranks highest (57/100): Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d.