CVE-2016-3995: Cryptopp Crypto++

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.

Affected products

• Cryptopp Crypto++: up to and including 5.6.3

Published 2017-02-13. Last modified 2026-06-17.