CVE-2026-50185

A flaw was found in the cmov component of RustCrypto. The aarch64 implementations of Cmov and CmovEq incorrectly assume that high bits are zero-extended when loading values smaller than a register. This can lead to incorrect output when certain high bits are set in a Cmov selector or in the u16 a...

GHSA-3RJW-M598-PQ24 Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set

Summary The aarch64 implementations of Cmov and CmovEq seem to assume that the high bits when loading a value of size smaller than a register into a register are zero-extended. However, this is not the case and these bits are unspecified. This can result in a left.cmovz&right, condition not movin...

PT-2026-55463

Name of the Vulnerable Software and Affected Versions RustCrypto CMOV versions 0.1.1 through 0.5.3 Description On aarch64 platforms, the implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs incorrectly assume that high bits are zero-extended when loading values smaller than a...