Vulnerabilidades em RustCrypto
11 resultadosAnálise Vexday
RustCrypto apresenta 11 vulnerabilidades catalogadas, nenhuma sob ataque ativo (KEV) ou classificada como crítica, com a fraqueza dominante relacionada a validação inadequada de assinatura criptográfica (CWE-347). O ritmo de divulgação é moderado, com apenas 1 CVE nos últimos 90 dias, indicando risco contido e sem sinais de exploração em larga escala no momento.
CVE-2023-49092MEDIUMRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsEPSS 0.6%CVE-2026-23519HIGHRustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnzEPSS 0.5%CVE-2026-21895LOWrsa crate has potential panic on a prime being equal to 1EPSS 0.4%CVE-2026-22699HIGHRustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()EPSS 0.4%CVE-2026-24850MEDIUMML-DSA Signature Verification Accepts Signatures with Repeated Hint IndicesEPSS 0.3%CVE-2026-22700HIGHRustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKEEPSS 0.3%CVE-2023-42811MEDIUMAEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failureEPSS 0.3%CVE-2026-22698HIGHRustCrypto SM2-PKE has 32-bit Biased Nonce VulnerabilityEPSS 0.3%CVE-2026-22705MEDIUMRustCrypto: Signatures has timing side-channel in ML-DSA decompositionEPSS 0.2%CVE-2025-27498MEDIUMAEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failureEPSS 0.1%CVE-2026-50185LOWRustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are setEPSS 0.1%