RustCrypto vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20251
3. 20268

Newest CVEs

• CVE-2026-50185

  RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set

  RustCrypto · utils

  Low2.0
• CVE-2026-24850

  ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices

  RustCrypto · signatures

  Medium5.3
• CVE-2026-23519

  RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz

  RustCrypto · utils

  High8.9
• CVE-2026-22705

  RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

  RustCrypto · signatures

  Medium6.4
• CVE-2026-22700

  RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE

  RustCrypto · elliptic-curves

  High7.5
• CVE-2026-22699

  RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()

  RustCrypto · elliptic-curves

  High7.5
• CVE-2026-22698

  RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability

  RustCrypto · elliptic-curves

  High8.7
• CVE-2026-21895

  rsa crate has potential panic on a prime being equal to 1

  RustCrypto · RSA

  Low2.7
• CVE-2025-27498

  AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure

  RustCrypto · AEADs

  Medium5.6
• CVE-2023-49092

  RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

  RustCrypto · RSA

  Medium5.9