6 matches found
GHSA-PV9V-5J35-XWCR libcrux Panics During Standalone MAC Operations
An incorrect constant for the key length in libcrux-poly1305 caused the standalone MAC function libcruxpoly1305::mac to always panic with an out-of-bounds memory access. Impact Applications wishing to use libcrux-poly1305 as a standalone MAC would experience panics. The use of libcrux-poly1305 in...
libcrux Panics During Standalone MAC Operations
An incorrect constant for the key length in libcrux-poly1305 caused the standalone MAC function libcruxpoly1305::mac to always panic with an out-of-bounds memory access. Impact Applications wishing to use libcrux-poly1305 as a standalone MAC would experience panics. The use of libcrux-poly1305 in...
libcrux-aead (>=0.0.4-pre.1, <=0.0.6) potentially affected by unknown CVE via libcrux-poly1305 (0.0.4)
libcrux-poly1305 CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-poly1305 and may be impacted: - libcrux-aead =0.0.4-pre.1, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-PV9V-5J35-XWCR...
RUSTSEC-2026-0073 Panic in Standalone MAC Operations
An incorrect constant for the key length in libcrux-poly1305 caused the standalone MAC function libcruxpoly1305::mac to always panic with an out-of-bounds memory access. Impact Applications wishing to use libcrux-poly1305 as a standalone MAC would experience panics. The use of libcrux-poly1305 in...
libcrux-aead (>=0.0.4-pre.1, <=0.0.6) potentially affected by unknown CVE via libcrux-poly1305 (0.0.4)
libcrux-poly1305 CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-poly1305 and may be impacted: - libcrux-aead =0.0.4-pre.1, =0.0.6 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0073...
PT-2026-27355
An incorrect constant for the key length in libcrux-poly1305 caused the standalone MAC function libcrux poly1305::mac to always panic with an out-of-bounds memory access. Impact Applications wishing to use libcrux-poly1305 as a standalone MAC would experience panics. The use of libcrux-poly1305 i...