Rustcrypto

10 CVEs across 7 Rustcrypto products. Browse Rustcrypto vulnerabilities, severities, and proof-of-concept exploits.

Rustcrypto products with known CVEs

ProductCVEs
Elliptic-Curves3
Sm2 Elliptic Curve3
Aeads2
Rsa2
Signatures2
Utils2
Cmov1
Rustcrypto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-501852026-07-17RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches b…
CVE-2026-24850Medium5.32026-01-28The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and prior to version 0.1.0…
CVE-2026-23519Critical9.82026-01-15RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches b…
CVE-2026-22705Medium6.42026-01-10RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2…
CVE-2026-22700High7.52026-01-10RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve fo…
CVE-2026-22699High7.52026-01-10RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve fo…
CVE-2026-22698High7.52026-01-10RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve fo…
CVE-2026-21895Medium5.32026-01-08The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics…
CVE-2025-274982025-03-03aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even…
CVE-2023-49092Medium5.92023-11-28RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through ti…
CVE-2023-42811Medium4.72023-09-22aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place…