CVEbaza.pl › CWE Dictionary › CWE-333
Common Weakness Enumeration

CWE-333

Improper Handling of Insufficient Entropy in TRNG

Category: VariantCVE: 1
Description

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

Extended Description

The rate at which true random numbers can be generated is limited. It is important that one uses them only when they are needed for security.

CVE vulnerabilities with CWE-333 (1)
7.2
CVSS
HIGH
CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

pub. 2025-11-21
Information
ID: CWE-333
Type: Variant
Vulnerabilities: 1
MITRE CWE ↗
← CWE Dictionary
CWE-333 — Improper Handling of Insufficient Entropy in TRNG | CWE Dictionary | CVEbaza.pl