GHSA-h37v-hp6w-2pp8
NoneCVSS
—
EPSS
—
Published
Feb 2, 2026
CISA due date
—
The record
ml-dsa's UseHint function has off by two error when r0 equals zero
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | ml-dsa | 0 | 0.1.0-rc.5 |
Related vulnerabilities
- GHSA-5x2r-hc65-25f9 ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices Also affects ml-dsa
- CVE-2026-24850 The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature… Also affects ml-dsa
- CVE-2026-22705 RustCrypto: Signatures offers support for digital signatures, which provide… Also affects ml-dsa
- RUSTSEC-2025-0144 Timing side-channel in ML-DSA decomposition Also affects ml-dsa
- CVE-2026-42618 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in… CWE-193
- CVE-2026-106584 In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times… CWE-193
- CVE-2026-90781 alsa-lib through 1.2.16.1 contains a stack buffer overflow in the… CWE-193
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-193