RUSTSEC-2026-0126
NoneCVSS
—
EPSS
—
Published
Apr 27, 2026
CISA due date
—
The record
AVX2 Implementation Did Not Fully Reduce Intermediate Values
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libcrux-ml-dsa | 0.0.0-0 | 0.0.9 |
Related vulnerabilities
- RUSTSEC-2026-0125 Signature Verification on AVX2 Platforms Mishandles Edge Case Also affects libcrux-ml-dsa
- RUSTSEC-2026-0076 Panic in Signature Hint Decoding During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2026-0077 Incorrect Check of Signer Response Norm During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2025-0133 Incorrect calculation on aarch64 Also affects libcrux-ml-dsa