vulnerability

FreeBSD: VID-aeac223e-60e1-11f0-8baa-8447094a420f (CVE-2025-52473): liboqs -- Secret-dependent branching in HQC

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:N)

Published

Jul 14, 2025

Added

Jul 15, 2025

Modified

Mar 25, 2026

Description

The OpenQuantumSafe project reports: Secret-dependent branching in HQC reference implementation when compiled with Clang 17-20 for optimizations above -O0

Solution

freebsd-upgrade-package-liboqs

References

CVE-2025-52473
https://attackerkb.com/topics/CVE-2025-52473
CWE-200
EUVD-EUVD-2025-21027
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21027

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report