Security researcher Jean-Baptiste Bdrune from Quarkslab and cryptographer Marion Videau have discovered a number of security vulnerabilities in the popular encryption platform VeraCrypt. A new audit of the disk-encryption software revealed the existence of eight critical, three medium, and 15 low -severity vulnerabilities. They discovered that boot passwords in UEFI mode could be retrieved by an attacker because the application fails to erase passwords when changed by users. VeraCrypt is much safer after this audit, and the fixes applied to the software mean that the world is safer when using this software”]
Source: http://securityaffairs.co/wordpress/52405/security/veracrypt-audit.html