CVE-2024-50382: Botan Project Botan

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.

Affected products

• Botan Project Botan: before 3.6.0 (fixed in 3.6.0)

Published 2024-10-23. Last modified 2026-06-17.