Skip to content
OpenAdvisories

Weakness (CWE)

CWE-334: Small Space of Random Values

Base Draft

The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.

How to prevent it (1 mitigation)

  1. Architecture and Design, Requirements

    Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems. Consult FIPS 140-2 Annex C ("Approved Random Number Generators").

Source: MITRE CWE-334

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-71851 Public exploit

    crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

    crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random(), in…

    brix crypto-js crypto-js cryptojs Debian Ubuntu npm