CWE-336: Same Seed in Pseudo-Random Number Generator (PRNG)

Filter

The product uses a Pseudo-Random Number Generator (PRNG) that uses the same seed each time the product is initialized.

What the weakness is: CWE-336 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures

Ask an AI about CWE-336

Show the prompt

Explain CWE-336: Same Seed in Pseudo-Random Number Generator (PRNG) and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/336.html and https://cve.bz/cve/cwe/336?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.7CVE-2026-6924EPSS 0.4%2026-07-23
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted reposi…
9.2CVE-2026-24044EPSS 0.3%2026-02-12
Element Server Suite Community Edition (ESS Community) deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook (using matrix-tools container before 0.5.7) …
7.8CVE-2021-42810EPSS 0.3%2022-01-19
A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.