RUSTSEC-2026-0125
NoneCVSS
—
EPSS
—
Published
May 5, 2026
CISA due date
—
The record
Signature Verification on AVX2 Platforms Mishandles Edge Case
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libcrux-ml-dsa | 0 | 0.0.9 |
| crates.io | libcrux-ml-dsa | 0.0.0-0 | 0.0.9 |
Related vulnerabilities
- RUSTSEC-2026-0126 AVX2 Implementation Did Not Fully Reduce Intermediate Values Also affects libcrux-ml-dsa
- RUSTSEC-2026-0076 Panic in Signature Hint Decoding During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2026-0077 Incorrect Check of Signer Response Norm During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2025-0133 Incorrect calculation on aarch64 Also affects libcrux-ml-dsa