{"cve":"CVE-2023-42811","nvd":{"published":"2023-09-22T16:15:10.583","modified":"2026-06-17T06:24:34.020","status":"Modified","description":"aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verification fails. If a program using the `aes-gcm` crate's `decrypt_in_place*` APIs accesses the buffer after decryption failure, it will contain a decryption of an unauthenticated input. Depending on the specific nature of the program this may enable Chosen Ciphertext Attacks (CCAs) which can cause a catastrophic breakage of the cipher including full plaintext recovery. Version 0.10.3 contains a fix for this issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":5.5},"cwes":["CWE-347"],"references":["https://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309","https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYQCICN6BVC6I75O3F6W4VK4J3MOYDJU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U67ZSMNX5V3WTBYPUYF45PSFG4SF5SGF/"],"products":["aes-gcm_project:aes-gcm","fedoraproject:fedora"],"source":"nvd","synced_at":"2026-10-19T21:39:34.467980132+00:00"},"epss":{"cve":"CVE-2023-42811","score":0.0023,"percentile":0.13889,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-423w-p2w9-r7vq","url":"https://osv.dev/vulnerability/GHSA-423w-p2w9-r7vq","summary":"AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure","modified":"2026-02-03T03:15:54.086216Z","packages":[{"ecosystem":"crates.io","name":"aes-gcm","purl":"pkg:cargo/aes-gcm","ranges":[">=0.10.0 <0.10.3"],"fixed":["0.10.3"]}]},{"id":"RUSTSEC-2023-0096","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0096","summary":"Plaintext exposed in decrypt_in_place_detached even on tag verification failure","modified":"2026-10-12T18:00:05.861248756Z","packages":[{"ecosystem":"crates.io","name":"aes-gcm","purl":"pkg:cargo/aes-gcm","ranges":[">=0.10.0 <0.10.3"],"fixed":["0.10.3"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}