[CVE-2024-54137] Finding bugs in implementations of HQC, the fifth post-quantum standard

CVE

CVE-2024-54137

Published

2025-03-20 23:00

Collected

2026-07-08 12:17

---
id: 4347
title: "[CVE-2024-54137] Finding bugs in implementations of HQC, the fifth post-quantum standard"
cve: CVE-2024-54137
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/finding-bugs-in-implementations-of-hqc-the-fifth-post-quantum-standard.html"
published_at: "2025-03-20 23:00"
tags: ["cryptography", "post-quantum", "nist", "differential-fuzzing", "hqc", "cve-2024-54137"]
phying_url: "https://phying.com/item/4347"
lang: en
---

# [CVE-2024-54137] Finding bugs in implementations of HQC, the fifth post-quantum standard

## Summary

Using its crypto-condor test suite, Quarkslab flagged two critical bugs in HQC's reference implementation right before NIST standardized the code-based KEM, leading to CVE-2024-54137.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2024-54137
- **Published:** 2025-03-20 23:00
- **Original:** https://blog.quarkslab.com/finding-bugs-in-implementations-of-hqc-the-fifth-post-quantum-standard.html
- **Phying News:** https://phying.com/item/4347