RUSTSEC-2025-0144
Medium · 6.4CVSS
6.4
EPSS
—
Published
Dec 12, 2025
CISA due date
—
The record
Timing side-channel in ML-DSA decomposition
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | ml-dsa | 0 | 0.1.0-rc.3 |
| crates.io | ml-dsa | 0.0.0-0 | 0.1.0-rc.3 |
Related vulnerabilities
- CVE-2026-22705 RustCrypto: Signatures offers support for digital signatures, which provide… Same vulnerability
- GHSA-h37v-hp6w-2pp8 ml-dsa's UseHint function has off by two error when r0 equals zero Also affects ml-dsa
- GHSA-5x2r-hc65-25f9 ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices Also affects ml-dsa
- CVE-2026-24850 The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature… Also affects ml-dsa