CVE-2024-31510 Other in n/a
A remote attacker can escalate privileges in the Open Quantum Safe liboqs library via a flaw in the Dilithium signature component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-31510?
CVE-2024-31510 is a critical vulnerability in n/a, published on 24 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-ipd_avx2/sign.c component.
Which versions are affected by CVE-2024-31510?
It affects 1 product.
Products include Openquantumsafe Liboqs.
How do I fix CVE-2024-31510?
No fix has been published for CVE-2024-31510 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-31510 being exploited?
There is no known exploitation of CVE-2024-31510 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2024-54137 liboqs has a correctness error in HQC decapsulation
- CVE-2025-52473 liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-20
- CVE-2024-36405 Information disclosure in liboqs
- CVE-2026-44518 liboqs: XMSS Buffer Overread Bug
- CVE-2026-46344 liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)