Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/08/19 2:02 p.m.33 views

CVE-2026-76234 libcrux before 0.0.6 Cryptographic Implementation Bug Fixes

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...

8.7CVSS0.00224EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/26 12:00 p.m.16 views

RUSTSEC-2026-0023 X25519 secret validation did not check buffer length or clamping

The latest releases of the libcrux-ecdh crate contains the following bug-fix: 1301: Check length and clamping in X25519 secret validation. This is a breaking change since errors are now raised on unclamped X25519 secrets or inputs of the wrong length...

5.5AI score0.00224EPSS
SaveExploits0References3
RustSec
RustSec
added 2026/01/26 12:00 p.m.21 views

X25519 secret validation did not check buffer length or clamping

The latest releases of the libcrux-ecdh crate contains the following bug-fix: 1301: Check length and clamping in X25519 secret validation. This is a breaking change since errors are now raised on unclamped X25519 secrets or inputs of the wrong length...

8.7CVSS5.4AI score0.00224EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder