Lucene search
+L

38 matches found

Packet Storm News
Packet Storm News
•added 2026/08/03 12:00 a.m.•24 views

RFE Standards

Minimum Viable Standard MVS & Request for Evidence RFE Framework - Decompose bloated, legacy RFCs X.509/ASN.1 and RFC 3986 URIs into usage-driven, empirical standards. Coverage is dictated by observable real-world usage data plus an explicit Criticality Override Registry - not design-by-committee...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/05/19 6:48 a.m.•16 views

assimp:assimp_fuzzer: Use-of-uninitialized-value in aiMatrix4x4t<float>::Decompose

Detailed Report: https://oss-fuzz.com/testcase?key=5370859673157632 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: aiMatrix4x4t::Decompose...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/13 10:52 p.m.•22 views

CVE-2026-22705

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS5.7AI score0.00163EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/01/13 3:10 p.m.•54 views

RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

Summary A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. Details The analysis was performed using a constant-time analyzer that examines compiled assembly code for instructions with data-dependent timing...

6.4CVSS5.9AI score0.00163EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/01/13 3:10 p.m.•37 views

GHSA-HCP2-X6J4-29J7 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

Summary A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. Details The analysis was performed using a constant-time analyzer that examines compiled assembly code for instructions with data-dependent timing...

6.4CVSS5.9AI score0.00163EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/01/13 3:10 p.m.•23 views

EUVD-2026-1867

RustCrypto: Signatures has timing side-channel in ML-DSA decomposition...

6.4CVSS5.8AI score0.00163EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/10 7:16 a.m.•44 views

CVE-2026-22705

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS0.00163EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/10 6:14 a.m.•55 views

CVE-2026-22705 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS0.00163EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/01/10 6:14 a.m.•27 views

CVE-2026-22705 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS6.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/10 6:14 a.m.•13 views

CVE-2026-22705 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS5.7AI score0.00163EPSS
SaveExploits0References3
Mend
Mend
•added 2026/01/10 6:14 a.m.•10 views

CVE-2026-22705

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

7.4CVSS5.7AI score0.00163EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/10 12:00 a.m.•10 views

CVE-2026-22705: Use of a Cryptographic Primitive with a Risky Implementation

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

6.4CVSS5.7AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/10 12:00 a.m.•23 views

RustCrypto: Security Vulnerabilities in Signatures

RustCrypto: Signatures is a cryptographic signature algorithm open-sourced by Rust Crypto. A security vulnerability exists in RustCrypto: Signatures versions prior to 0.1.0-rc.2, which stems from the presence of timing side channels in the Decompose algorithm used during ML-DSA signing...

6.4CVSS5.8AI score0.00163EPSS
SaveExploits0References3
osv_rustsec
osv_rustsec
•added 2025/12/12 12:00 p.m.•38 views

RUSTSEC-2025-0144 Timing side-channel in ML-DSA decomposition

Summary A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. Details The analysis was performed using a constant-time analyzer that examines compiled assembly code for instructions with data-dependent timing...

6.4CVSS5.9AI score0.00163EPSS
SaveExploits0References3
RustSec
RustSec
•added 2025/12/12 12:00 p.m.•32 views

Timing side-channel in ML-DSA decomposition

Summary A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. Details The analysis was performed using a constant-time analyzer that examines compiled assembly code for instructions with data-dependent timing...

6.4CVSS5.9AI score0.00163EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/20 12:00 a.m.•23 views

PyTorch bernoulli_p decompose Data Compromise

The vulnerability of the bernoullip function in the PyTorch machine learning framework’s decompose method is related to inefficient calculations by the central processor. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

5.3CVSS6.6AI score0.00419EPSS
SaveExploits0References6Affected Software1
osv_bit
osv_bit
•added 2025/10/05 11:47 p.m.•26 views

BIT-PYTORCH-2025-46153

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...

5.3CVSS5.8AI score0.00419EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-31108

Malicious code in bioql PyPI...

5.3CVSS5.9AI score0.00419EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/09/29 11:23 p.m.•13 views

SUSE CVE-2025-46153

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...

5.3CVSS5.8AI score0.00419EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/09/25 3:16 p.m.•24 views

DEBIAN-CVE-2025-46153

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...

5.3CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder