Vulnerabilities in RustCrypto
11 resultsCVE-2023-49092MEDIUMRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsEPSS 0.6%CVE-2026-23519HIGHRustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnzEPSS 0.6%CVE-2026-21895LOWrsa crate has potential panic on a prime being equal to 1EPSS 0.4%CVE-2026-22699HIGHRustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()EPSS 0.4%CVE-2026-24850MEDIUMML-DSA Signature Verification Accepts Signatures with Repeated Hint IndicesEPSS 0.3%CVE-2026-22700HIGHRustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKEEPSS 0.3%CVE-2026-22698HIGHRustCrypto SM2-PKE has 32-bit Biased Nonce VulnerabilityEPSS 0.3%CVE-2023-42811MEDIUMAEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failureEPSS 0.2%CVE-2026-22705MEDIUMRustCrypto: Signatures has timing side-channel in ML-DSA decompositionEPSS 0.2%CVE-2026-50185LOWRustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are setEPSS 0.2%CVE-2025-27498MEDIUMAEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failureEPSS 0.1%