Vulnerability · Published Mar 3, 2025 · Assigned by GitHub_M
CVE-2025-27498AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
Medium 5.6
In plain English
A medium-severity security flaw in AEADs from RustCrypto. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 4.0)5.6Medium
Exploit odds (30 days)0.1%top 97.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:24.04:LTS | rust-aes-gcm | no fix listed | UBUNTU-CVE-2025-27498 |
| Ubuntu:25.10 | rust-aes-gcm | no fix listed | UBUNTU-CVE-2025-27498 |
| Ubuntu:26.04:LTS | rust-aes-gcm | no fix listed | UBUNTU-CVE-2025-27498 |
| Ubuntu:26.10 | rust-aes-gcm | no fix listed | UBUNTU-CVE-2025-27498 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| RustCrypto | AEADs | < 0.4.3 |
Weakness: CWE-347 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N