Amazon Aws-Lc-Fips-Sys vulnerabilities

1 known vulnerability affecting amazon/aws-lc-fips-sys.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-3337HIGHCVSS 8.2≥ 0.13.0, < 0.13.122026-03-02
CVE-2026-3337 [HIGH] CWE-208 CVE-2026-3337: Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to pote Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm. Customers of AWS services do not need to take action. Applications u
nvdosv