CVE-2025-27498

aes-gcm is a pure Rust implementation of the AES-GCM. In decryptinplacedetached, the decrypted ciphertext which is the correct ciphertext is exposed even if the tag is incorrect. This is because in decryptinplace in asconcore.rs, tag verification causes an error to be returned with the plaintext...

PT-2025-9525

Name of the Vulnerable Software and Affected Versions aes-gcm versions prior to 0.4.3 Description The issue arises in the decrypt in place detached function, where the decrypted ciphertext is exposed even if the tag is incorrect. This occurs because the tag verification in the decrypt inplace...

PT-2023-28598

Name of the Vulnerable Software and Affected Versions aes-gcm versions 0.10.0 through 0.10.2 Description The issue concerns the AES GCM implementation of decrypt in place detached, where the decrypted ciphertext is exposed even if tag verification fails. This can enable Chosen Ciphertext Attacks...