CWE-339: Small Seed Space in PRNG

Filter

A Pseudo-Random Number Generator (PRNG) uses a relatively small seed space, which makes it more susceptible to brute force attacks.

What the weakness is: CWE-339 at MITRE. All weaknesses

Ask an AI about CWE-339

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-339: Small Seed Space in PRNG and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/339.html and https://cve.bz/cve/cwe/339?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.4CVE-2026-2815EPSS 0.3%2026-06-25
Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys
6.3CVE-2024-10026EPSS 0.2%2025-01-30
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.