CWE-333 Improper Handling of Insufficient Entropy in TRNG

variant

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-62626US——
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the cons…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan