CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3337

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.2%

CVSS Severity

CVSS v3 Score 5.9

References

Products affected by CVE-2026-3337

Amazon » Aws-Lc-Fips-Sys » Version: 0.13.0

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.0
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.1

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.1
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.10

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.10
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.11

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.11
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.2

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.2
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.3

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.3
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.4

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.4
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.5

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.5
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.6

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.6
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.7

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.7
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.8

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.8
Amazon » Aws-Lc-Fips-Sys » Version: 0.13.9

cpe:2.3:a:amazon:aws-lc-fips-sys:0.13.9
Amazon » Aws-Lc-Sys » Version: 0.14.0

cpe:2.3:a:amazon:aws-lc-sys:0.14.0
Amazon » Aws-Lc-Sys » Version: 0.14.1

cpe:2.3:a:amazon:aws-lc-sys:0.14.1
Amazon » Aws-Lc-Sys » Version: 0.15.0

cpe:2.3:a:amazon:aws-lc-sys:0.15.0
Amazon » Aws-Lc-Sys » Version: 0.16.0

cpe:2.3:a:amazon:aws-lc-sys:0.16.0
Amazon » Aws-Lc-Sys » Version: 0.17.0

cpe:2.3:a:amazon:aws-lc-sys:0.17.0
Amazon » Aws-Lc-Sys » Version: 0.18.0

cpe:2.3:a:amazon:aws-lc-sys:0.18.0
Amazon » Aws-Lc-Sys » Version: 0.19.0

cpe:2.3:a:amazon:aws-lc-sys:0.19.0
Amazon » Aws-Lc-Sys » Version: 0.20.0

cpe:2.3:a:amazon:aws-lc-sys:0.20.0
Amazon » Aws-Lc-Sys » Version: 0.20.1

cpe:2.3:a:amazon:aws-lc-sys:0.20.1
Amazon » Aws-Lc-Sys » Version: 0.21.0

cpe:2.3:a:amazon:aws-lc-sys:0.21.0
Amazon » Aws-Lc-Sys » Version: 0.21.1

cpe:2.3:a:amazon:aws-lc-sys:0.21.1
Amazon » Aws-Lc-Sys » Version: 0.21.2

cpe:2.3:a:amazon:aws-lc-sys:0.21.2
Amazon » Aws-Lc-Sys » Version: 0.22.0

cpe:2.3:a:amazon:aws-lc-sys:0.22.0
Amazon » Aws-Lc-Sys » Version: 0.23.0

cpe:2.3:a:amazon:aws-lc-sys:0.23.0
Amazon » Aws-Lc-Sys » Version: 0.23.1

cpe:2.3:a:amazon:aws-lc-sys:0.23.1
Amazon » Aws-Lc-Sys » Version: 0.24.0

cpe:2.3:a:amazon:aws-lc-sys:0.24.0
Amazon » Aws-Lc-Sys » Version: 0.24.1

cpe:2.3:a:amazon:aws-lc-sys:0.24.1
Amazon » Aws-Lc-Sys » Version: 0.25.0

cpe:2.3:a:amazon:aws-lc-sys:0.25.0
Amazon » Aws-Lc-Sys » Version: 0.25.1

cpe:2.3:a:amazon:aws-lc-sys:0.25.1
Amazon » Aws-Lc-Sys » Version: 0.26.0

cpe:2.3:a:amazon:aws-lc-sys:0.26.0
Amazon » Aws-Lc-Sys » Version: 0.27.0

cpe:2.3:a:amazon:aws-lc-sys:0.27.0
Amazon » Aws-Lc-Sys » Version: 0.27.1

cpe:2.3:a:amazon:aws-lc-sys:0.27.1
Amazon » Aws-Lc-Sys » Version: 0.27.2

cpe:2.3:a:amazon:aws-lc-sys:0.27.2
Amazon » Aws-Lc-Sys » Version: 0.28.0

cpe:2.3:a:amazon:aws-lc-sys:0.28.0
Amazon » Aws-Lc-Sys » Version: 0.28.1

cpe:2.3:a:amazon:aws-lc-sys:0.28.1
Amazon » Aws-Lc-Sys » Version: 0.28.2

cpe:2.3:a:amazon:aws-lc-sys:0.28.2
Amazon » Aws-Lc-Sys » Version: 0.29.0

cpe:2.3:a:amazon:aws-lc-sys:0.29.0
Amazon » Aws-Lc-Sys » Version: 0.30.0

cpe:2.3:a:amazon:aws-lc-sys:0.30.0
Amazon » Aws-Lc-Sys » Version: 0.31.0

cpe:2.3:a:amazon:aws-lc-sys:0.31.0
Amazon » Aws-Lc-Sys » Version: 0.32.0

cpe:2.3:a:amazon:aws-lc-sys:0.32.0
Amazon » Aws-Lc-Sys » Version: 0.32.1

cpe:2.3:a:amazon:aws-lc-sys:0.32.1
Amazon » Aws-Lc-Sys » Version: 0.32.2

cpe:2.3:a:amazon:aws-lc-sys:0.32.2
Amazon » Aws-Lc-Sys » Version: 0.32.3

cpe:2.3:a:amazon:aws-lc-sys:0.32.3
Amazon » Aws-Lc-Sys » Version: 0.33.0

cpe:2.3:a:amazon:aws-lc-sys:0.33.0
Amazon » Aws-Lc-Sys » Version: 0.34.0

cpe:2.3:a:amazon:aws-lc-sys:0.34.0
Amazon » Aws-Lc-Sys » Version: 0.35.0

cpe:2.3:a:amazon:aws-lc-sys:0.35.0
Amazon » Aws-Lc-Sys » Version: 0.36.0

cpe:2.3:a:amazon:aws-lc-sys:0.36.0
Amazon » Aws-Lc-Sys » Version: 0.37.0

cpe:2.3:a:amazon:aws-lc-sys:0.37.0
Amazon » Aws-Lc-Sys » Version: 0.37.1

cpe:2.3:a:amazon:aws-lc-sys:0.37.1
Amazon » Aws Libcrypto » Version: 1.21.0

cpe:2.3:a:amazon:aws_libcrypto:1.21.0
Amazon » Aws Libcrypto » Version: 1.22.0

cpe:2.3:a:amazon:aws_libcrypto:1.22.0
Amazon » Aws Libcrypto » Version: 1.23.0

cpe:2.3:a:amazon:aws_libcrypto:1.23.0
Amazon » Aws Libcrypto » Version: 1.24.0

cpe:2.3:a:amazon:aws_libcrypto:1.24.0
Amazon » Aws Libcrypto » Version: 1.24.1

cpe:2.3:a:amazon:aws_libcrypto:1.24.1
Amazon » Aws Libcrypto » Version: 1.25.0

cpe:2.3:a:amazon:aws_libcrypto:1.25.0
Amazon » Aws Libcrypto » Version: 1.26.0

cpe:2.3:a:amazon:aws_libcrypto:1.26.0
Amazon » Aws Libcrypto » Version: 1.27.0

cpe:2.3:a:amazon:aws_libcrypto:1.27.0
Amazon » Aws Libcrypto » Version: 1.28.0

cpe:2.3:a:amazon:aws_libcrypto:1.28.0
Amazon » Aws Libcrypto » Version: 1.29.0

cpe:2.3:a:amazon:aws_libcrypto:1.29.0
Amazon » Aws Libcrypto » Version: 1.30.0

cpe:2.3:a:amazon:aws_libcrypto:1.30.0
Amazon » Aws Libcrypto » Version: 1.30.1

cpe:2.3:a:amazon:aws_libcrypto:1.30.1
Amazon » Aws Libcrypto » Version: 1.31.0

cpe:2.3:a:amazon:aws_libcrypto:1.31.0
Amazon » Aws Libcrypto » Version: 1.32.0

cpe:2.3:a:amazon:aws_libcrypto:1.32.0
Amazon » Aws Libcrypto » Version: 1.33.0

cpe:2.3:a:amazon:aws_libcrypto:1.33.0
Amazon » Aws Libcrypto » Version: 1.34.0

cpe:2.3:a:amazon:aws_libcrypto:1.34.0
Amazon » Aws Libcrypto » Version: 1.34.1

cpe:2.3:a:amazon:aws_libcrypto:1.34.1
Amazon » Aws Libcrypto » Version: 1.34.2

cpe:2.3:a:amazon:aws_libcrypto:1.34.2
Amazon » Aws Libcrypto » Version: 1.35.0

cpe:2.3:a:amazon:aws_libcrypto:1.35.0
Amazon » Aws Libcrypto » Version: 1.35.1

cpe:2.3:a:amazon:aws_libcrypto:1.35.1
Amazon » Aws Libcrypto » Version: 1.36.0

cpe:2.3:a:amazon:aws_libcrypto:1.36.0
Amazon » Aws Libcrypto » Version: 1.36.1

cpe:2.3:a:amazon:aws_libcrypto:1.36.1
Amazon » Aws Libcrypto » Version: 1.37.0

cpe:2.3:a:amazon:aws_libcrypto:1.37.0
Amazon » Aws Libcrypto » Version: 1.38.0

cpe:2.3:a:amazon:aws_libcrypto:1.38.0
Amazon » Aws Libcrypto » Version: 1.39.0

cpe:2.3:a:amazon:aws_libcrypto:1.39.0
Amazon » Aws Libcrypto » Version: 1.40.0

cpe:2.3:a:amazon:aws_libcrypto:1.40.0
Amazon » Aws Libcrypto » Version: 1.41.0

cpe:2.3:a:amazon:aws_libcrypto:1.41.0
Amazon » Aws Libcrypto » Version: 1.41.1

cpe:2.3:a:amazon:aws_libcrypto:1.41.1
Amazon » Aws Libcrypto » Version: 1.42.0

cpe:2.3:a:amazon:aws_libcrypto:1.42.0
Amazon » Aws Libcrypto » Version: 1.43.0

cpe:2.3:a:amazon:aws_libcrypto:1.43.0
Amazon » Aws Libcrypto » Version: 1.44.0

cpe:2.3:a:amazon:aws_libcrypto:1.44.0
Amazon » Aws Libcrypto » Version: 1.45.0

cpe:2.3:a:amazon:aws_libcrypto:1.45.0
Amazon » Aws Libcrypto » Version: 1.46.0

cpe:2.3:a:amazon:aws_libcrypto:1.46.0
Amazon » Aws Libcrypto » Version: 1.46.1

cpe:2.3:a:amazon:aws_libcrypto:1.46.1
Amazon » Aws Libcrypto » Version: 1.47.0

cpe:2.3:a:amazon:aws_libcrypto:1.47.0
Amazon » Aws Libcrypto » Version: 1.48.0

cpe:2.3:a:amazon:aws_libcrypto:1.48.0
Amazon » Aws Libcrypto » Version: 1.48.1

cpe:2.3:a:amazon:aws_libcrypto:1.48.1
Amazon » Aws Libcrypto » Version: 1.48.2

cpe:2.3:a:amazon:aws_libcrypto:1.48.2
Amazon » Aws Libcrypto » Version: 1.48.3

cpe:2.3:a:amazon:aws_libcrypto:1.48.3
Amazon » Aws Libcrypto » Version: 1.48.4

cpe:2.3:a:amazon:aws_libcrypto:1.48.4
Amazon » Aws Libcrypto » Version: 1.48.5

cpe:2.3:a:amazon:aws_libcrypto:1.48.5
Amazon » Aws Libcrypto » Version: 1.49.0

cpe:2.3:a:amazon:aws_libcrypto:1.49.0
Amazon » Aws Libcrypto » Version: 1.49.1

cpe:2.3:a:amazon:aws_libcrypto:1.49.1
Amazon » Aws Libcrypto » Version: 1.50.0

cpe:2.3:a:amazon:aws_libcrypto:1.50.0
Amazon » Aws Libcrypto » Version: 1.50.1

cpe:2.3:a:amazon:aws_libcrypto:1.50.1
Amazon » Aws Libcrypto » Version: 1.51.0

cpe:2.3:a:amazon:aws_libcrypto:1.51.0
Amazon » Aws Libcrypto » Version: 1.51.1

cpe:2.3:a:amazon:aws_libcrypto:1.51.1
Amazon » Aws Libcrypto » Version: 1.51.2

cpe:2.3:a:amazon:aws_libcrypto:1.51.2
Amazon » Aws Libcrypto » Version: 1.52.0

cpe:2.3:a:amazon:aws_libcrypto:1.52.0
Amazon » Aws Libcrypto » Version: 1.52.1

cpe:2.3:a:amazon:aws_libcrypto:1.52.1
Amazon » Aws Libcrypto » Version: 1.53.0

cpe:2.3:a:amazon:aws_libcrypto:1.53.0
Amazon » Aws Libcrypto » Version: 1.53.1

cpe:2.3:a:amazon:aws_libcrypto:1.53.1
Amazon » Aws Libcrypto » Version: 1.54.0

cpe:2.3:a:amazon:aws_libcrypto:1.54.0
Amazon » Aws Libcrypto » Version: 1.55.0

cpe:2.3:a:amazon:aws_libcrypto:1.55.0
Amazon » Aws Libcrypto » Version: 1.56.0

cpe:2.3:a:amazon:aws_libcrypto:1.56.0
Amazon » Aws Libcrypto » Version: 1.57.0

cpe:2.3:a:amazon:aws_libcrypto:1.57.0
Amazon » Aws Libcrypto » Version: 1.57.1

cpe:2.3:a:amazon:aws_libcrypto:1.57.1
Amazon » Aws Libcrypto » Version: 1.58.0

cpe:2.3:a:amazon:aws_libcrypto:1.58.0
Amazon » Aws Libcrypto » Version: 1.58.1

cpe:2.3:a:amazon:aws_libcrypto:1.58.1
Amazon » Aws Libcrypto » Version: 1.59.0

cpe:2.3:a:amazon:aws_libcrypto:1.59.0
Amazon » Aws Libcrypto » Version: 1.60.0

cpe:2.3:a:amazon:aws_libcrypto:1.60.0
Amazon » Aws Libcrypto » Version: 1.61.0

cpe:2.3:a:amazon:aws_libcrypto:1.61.0
Amazon » Aws Libcrypto » Version: 1.61.1

cpe:2.3:a:amazon:aws_libcrypto:1.61.1
Amazon » Aws Libcrypto » Version: 1.61.2

cpe:2.3:a:amazon:aws_libcrypto:1.61.2
Amazon » Aws Libcrypto » Version: 1.61.3

cpe:2.3:a:amazon:aws_libcrypto:1.61.3
Amazon » Aws Libcrypto » Version: 1.61.4

cpe:2.3:a:amazon:aws_libcrypto:1.61.4
Amazon » Aws Libcrypto » Version: 1.62.0

cpe:2.3:a:amazon:aws_libcrypto:1.62.0
Amazon » Aws Libcrypto » Version: 1.62.1

cpe:2.3:a:amazon:aws_libcrypto:1.62.1
Amazon » Aws Libcrypto » Version: 1.63.0

cpe:2.3:a:amazon:aws_libcrypto:1.63.0
Amazon » Aws Libcrypto » Version: 1.64.0

cpe:2.3:a:amazon:aws_libcrypto:1.64.0
Amazon » Aws Libcrypto » Version: 1.65.0

cpe:2.3:a:amazon:aws_libcrypto:1.65.0
Amazon » Aws Libcrypto » Version: 1.65.1

cpe:2.3:a:amazon:aws_libcrypto:1.65.1
Amazon » Aws Libcrypto » Version: 1.66.0

cpe:2.3:a:amazon:aws_libcrypto:1.66.0
Amazon » Aws Libcrypto » Version: 1.66.1

cpe:2.3:a:amazon:aws_libcrypto:1.66.1
Amazon » Aws Libcrypto » Version: 1.66.2

cpe:2.3:a:amazon:aws_libcrypto:1.66.2
Amazon » Aws Libcrypto » Version: 1.67.0

cpe:2.3:a:amazon:aws_libcrypto:1.67.0
Amazon » Aws Libcrypto » Version: 1.68.0

cpe:2.3:a:amazon:aws_libcrypto:1.68.0
Amazon » Aws Libcrypto » Version: 3.0.0

cpe:2.3:a:amazon:aws_libcrypto:3.0.0
Amazon » Aws Libcrypto » Version: 3.1.0

cpe:2.3:a:amazon:aws_libcrypto:3.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3337

Products

Pricing

Contact Us