GHSA-w3g8-fp6j-wvqw
NoneCVSS
—
EPSS
—
Published
Jan 9, 2026
CISA due date
—
The record
SM2-PKE has 32-bit Biased Nonce Vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | sm2 | 0.14.0-pre.0 | No fix |
| cargo | sm2 | 0.14.0-pre.0 | No fix |
Related vulnerabilities
- CVE-2026-22698 RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support… Same vulnerability
- GHSA-j9xq-69pf-pcm8 RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE Also affects sm2
- CVE-2026-22700 RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support… Also affects sm2
- GHSA-78p6-6878-8mj6 SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() Also affects sm2
- CVE-2026-22699 SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() Also affects sm2
- CVE-2026-80171 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-331
- CVE-2026-62646 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). CWE-331
- CVE-2026-4936 IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through… CWE-331