CVE-2024-49823: IBM Common Cryptographic Architecture

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.

Affected products

• IBM Common Cryptographic Architecture: from 7.0.0, before 7.5.52 (fixed in 7.5.52)

Published 2025-03-11. Last modified 2026-06-17.