CVE-2026-50185

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:14+00:00| published-proof-of-concept| https://github.com/RustCrypto/utils/security/advisories/GHSA-3rjw-m598-pq24 2026-07-17 20:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqumkeqp7424...

RustCrypto Utilities cmov: `thumbv6m-none-eabi` compiler emits non-constant time assembly when using `cmovnz`

Summary thumbv6m-none-eabi Cortex M0, M0+ and M1 compiler emits non-constant time assembly when using cmovnz portable version. I did not found any other target with the same behaviour but I did not go through all targets supported by Rust. Details It seems that, during mask computation, an LLVM...