RRustCrypto

Products

Exploited and recent CVEs

• CVE-2026-50185 Low 2.0 RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set 0.2%
• CVE-2026-24850 Medium 5.3 ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices 0.3%
• CVE-2026-23519 High 8.9 RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz 0.6%
• CVE-2026-22705 Medium 6.4 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition 0.2%
• CVE-2026-22700 High 7.5 RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE 0.3%
• CVE-2026-22699 High 7.5 RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() 0.4%
• CVE-2026-22698 High 8.7 RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability 0.3%
• CVE-2026-21895 Low 2.7 rsa crate has potential panic on a prime being equal to 1 0.4%
• CVE-2025-27498 Medium 5.6 AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure 0.1%
• CVE-2023-49092 Medium 5.9 RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels 0.6%
• CVE-2023-42811 Medium 4.7 AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure 0.2%