RUSTSEC-2025-0133
NoneCVSS
—
EPSS
—
Published
Dec 4, 2025
CISA due date
—
The record
Incorrect calculation on aarch64
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libcrux-intrinsics | 0.0.3 | 0.0.4 |
| crates.io | libcrux-intrinsics | 0.0.4-0 | 0.0.4 |
| crates.io | libcrux-ml-dsa | 0.0.3 | 0.0.4 |
| crates.io | libcrux-ml-kem | 0.0.3 | 0.0.4 |
| cargo | libcrux-intrinsics | 0.0.3 | No fix |
| cargo | libcrux-intrinsics | 0.0.3 | 0.0.4 |
Related vulnerabilities
- RUSTSEC-2026-0125 Signature Verification on AVX2 Platforms Mishandles Edge Case Also affects libcrux-ml-dsa
- RUSTSEC-2026-0126 AVX2 Implementation Did Not Fully Reduce Intermediate Values Also affects libcrux-ml-dsa
- RUSTSEC-2026-0076 Panic in Signature Hint Decoding During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2026-0077 Incorrect Check of Signer Response Norm During Verification Also affects libcrux-ml-dsa