Base weakness
Draft
CWE-1241: Use of Predictable Algorithm in Random Number Generator
The device uses an algorithm that is predictable and generates a pseudo-random number.
Last updated
7
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
Pseudo-random number generator algorithms are predictable because their registers have a finite number of possible states, which eventually lead to repeating patterns. As a result, pseudo-random number generators (PRNGs) can compromise their randomness or expose their internal state to various attacks, such as reverse engineering or tampering.
Real-world CVEs
7 recorded CVEs are caused by CWE-1241 (Use of Predictable Algorithm in Random Number Generator). The highest-severity and most recent are shown first. 3 new CWE-1241 CVEs have been recorded so far in 2026.