FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

liboqs -- Multiple vulnerabilities

Affected packages
		liboqs	<	0.16.0

Details

VuXML ID	e26b9011-80ef-11f1-b72c-8447094a420f
Discovery	2026-07-09
Entry	2026-07-16

The OpenQuantumSafe project reports:

uninitialized encaps_derand pointer dereference

out-of-bounds read in XMSS/XMSS^MT signature verification

Integer underflow in CROSS crypto_sign_open()

incorrect array size when calling secure_clean

Implemented optimization barrier OQS_MEM_BLACK_BOX and applied to ct_select in FrodoKEM

[source]

References

URL	https://github.com/open-quantum-safe/liboqs/releases/tag/0.16.0