PT-2026-65408

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions 1.73 through 1.77 Description Three ML-KEM CRYSTALS-Kyber routines perform non-constant-time division of secret-derived polynomial coefficients by the modulus q. The affected routines are Poly.toMsg, which decod...

CVE-2026-10097

wolfSSL's AVX2-optimized ML-KEM implementation mlkemcmpavx2 compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertexts that differ from the expected re-encryption solely in bytes 1536-1567 bypass implicit rejection and...