CVE-2016-7420

Published: Sep 16, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.

Affected (1)

Products: Cryptopp: Crypto++

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cryptopp Crypto++	Up to 5.6.4

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (15)

http://www.openwall.com/lists/oss-security/2016/09/15/12

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/16/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/28/2

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2023/09/28/4

Source: cve@mitre.org

http://www.securityfocus.com/bid/92988

Source: cve@mitre.org

https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://github.com/weidai11/cryptopp/issues/277

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/15/12

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/16/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/28/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2023/09/28/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2025/11/14/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/92988

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/weidai11/cryptopp/issues/277

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.