CVE-2014-4192
Dual_EC_DRBG implementation in RSA toolkit does not correctly handle certain byte requests, simplifying plaintext recovery
CVE-2007-6755
Recommendation for Dual_EC_DRBG algorithm contains point Q constants that could simplify decryption