CVE-2026-53762

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53762
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53762.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53762
Aliases
  • GHSA-94c6-mgmv-mqc5
Published
2026-08-21T18:50:58Z
Modified
2026-08-28T14:33:04Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)
Details

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-916"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53762.json"
}
References

Affected packages

Git / github.com/veracrypt/veracrypt

Affected ranges

Type
GIT
Repo
https://github.com/veracrypt/veracrypt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
39f93910075e1cf492fcf4a9f99a53c7d0b96b87
Fixed
d26216c294fdfb090ee856f6195c294176defa1d
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.26.29"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

VeraCrypt_1.*
VeraCrypt_1.0a
VeraCrypt_1.0b
VeraCrypt_1.0c
VeraCrypt_1.0d
VeraCrypt_1.0e
VeraCrypt_1.0f
VeraCrypt_1.0f-1
VeraCrypt_1.0f-2
VeraCrypt_1.0f-BETA
VeraCrypt_1.0f-BETA2
VeraCrypt_1.0f-BETA3
VeraCrypt_1.12
VeraCrypt_1.13
VeraCrypt_1.14
VeraCrypt_1.15
VeraCrypt_1.16
VeraCrypt_1.17
VeraCrypt_1.18
VeraCrypt_1.18_PreRelease
VeraCrypt_1.18a
VeraCrypt_1.19
VeraCrypt_1.20
VeraCrypt_1.21
VeraCrypt_1.22
VeraCrypt_1.23
VeraCrypt_1.24
VeraCrypt_1.24-Hotfix1
VeraCrypt_1.24-Update2
VeraCrypt_1.24-Update3
VeraCrypt_1.24-Update4
VeraCrypt_1.24-Update5
VeraCrypt_1.24-Update6
VeraCrypt_1.24-Update7
VeraCrypt_1.24-Update8_MacOSX
VeraCrypt_1.25.4
VeraCrypt_1.25.7
VeraCrypt_1.25.9
VeraCrypt_1.26.14
VeraCrypt_1.26.15
VeraCrypt_1.26.18
VeraCrypt_1.26.19
VeraCrypt_1.26.20
VeraCrypt_1.26.24
VeraCrypt_1.26.28_Beta
VeraCrypt_1.26.28_Beta2
VeraCrypt_1.26.28_Beta3
VeraCrypt_1.26.28_Beta4
VeraCrypt_1.26.6
VeraCrypt_1.26.7
VeraCrypt_Linux_1.*
VeraCrypt_Linux_1.0d
VeraCrypt_Linux_1.0e
VeraCrypt_Linux_1.0f-BETA
VeraCrypt_MacOSX_1.*
VeraCrypt_MacOSX_1.0d
VeraCrypt_MacOSX_1.0e
VeraCrypt_MacOSX_1.0f-BETA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53762.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "279980016887946032268505537595877705761",
            "length": 319
        },
        "id": "CVE-2026-53762-2fa3b4c9",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/veracrypt/veracrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87",
        "target": {
            "file": "src/Crypto/wolfCrypt.c",
            "function": "derive_key_sha256"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "155157277407136914238437785705120800270",
            "length": 319
        },
        "id": "CVE-2026-53762-3c8cb486",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/veracrypt/veracrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87",
        "target": {
            "file": "src/Crypto/wolfCrypt.c",
            "function": "derive_key_sha512"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "752993402405266969174683020266492657",
                "3448965288238259287415765180770827305",
                "144946223770513021363569517978517480677",
                "328508389028385476081962749466919037593",
                "273590230064866004627444677532759280909",
                "154466287511117457364287290695772135094",
                "292513367412518203476004278382158946347",
                "95880687682249169134753787737138239357",
                "61078547028126556956872026150294450517",
                "113702820062182811238455452662162293827",
                "76949180168500963251849187817318839629",
                "138734335030874248729557615527961242975"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-53762-bf2c3574",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/veracrypt/veracrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87",
        "target": {
            "file": "src/Crypto/wolfCrypt.c"
        }
    }
]
vanir_signatures_modified 
"2026-08-28T14:33:04Z"