{"cve":"CVE-2026-76234","nvd":{"published":"2026-08-19T14:17:52.797","modified":"2026-10-27T13:10:00.360","status":"Deferred","description":"libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X25519 secret keys); libcrux-ed25519 performed a duplicated clamping step during key generation; and libcrux-psq panicked instead of propagating an AEADError. These were fixed in the respective patched releases.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","score":8.7},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-347"],"references":["https://github.com/celabshq/libcrux/security/advisories/GHSA-435g-fcv3-8j26","https://www.vulncheck.com/advisories/libcrux-before-cryptographic-implementation-bug-fixes"],"products":[],"source":"nvd","synced_at":"2026-10-27T13:36:07.289888057+00:00"},"epss":{"cve":"CVE-2026-76234","score":0.00307,"percentile":0.23295,"date":"2026-10-26"},"kev":null,"osv":[{"id":"GHSA-435g-fcv3-8j26","url":"https://osv.dev/vulnerability/GHSA-435g-fcv3-8j26","summary":"Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`","modified":"2026-08-20T04:03:48.330165805Z","packages":[{"ecosystem":"crates.io","name":"libcrux-ecdh","purl":"pkg:cargo/libcrux-ecdh","ranges":["<0.0.6"],"fixed":["0.0.6"]},{"ecosystem":"crates.io","name":"libcrux-ed25519","purl":"pkg:cargo/libcrux-ed25519","ranges":["<0.0.6"],"fixed":["0.0.6"]},{"ecosystem":"crates.io","name":"libcrux-psq","purl":"pkg:cargo/libcrux-psq","ranges":["<0.0.7"],"fixed":["0.0.7"]}]},{"id":"RUSTSEC-2026-0023","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0023","summary":"X25519 secret validation did not check buffer length or clamping","modified":"2026-08-24T08:08:07Z","packages":[{"ecosystem":"crates.io","name":"libcrux-ecdh","purl":"pkg:cargo/libcrux-ecdh","ranges":[">=0.0.0-0 <0.0.6"],"fixed":["0.0.6"]}]},{"id":"RUSTSEC-2026-0024","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0024","summary":"Incorrect X25519 clamping check rejects all secrets on import","modified":"2026-08-24T08:08:07Z","packages":[{"ecosystem":"crates.io","name":"libcrux-psq","purl":"pkg:cargo/libcrux-psq","ranges":[">=0.0.0-0 <0.0.7"],"fixed":["0.0.7"]}]},{"id":"RUSTSEC-2026-0025","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0025","summary":"Panic in `libcrux-psq` on decryption of malformed AES-GCM ciphertext","modified":"2026-08-24T08:08:07Z","packages":[{"ecosystem":"crates.io","name":"libcrux-psq","purl":"pkg:cargo/libcrux-psq","ranges":[">=0.0.0-0 <0.0.7"],"fixed":["0.0.7"]}]},{"id":"RUSTSEC-2026-0026","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0026","summary":"Unnecessary clamping of seed reduces seed entropy to 251 bits","modified":"2026-08-24T08:08:07Z","packages":[{"ecosystem":"crates.io","name":"libcrux-ed25519","purl":"pkg:cargo/libcrux-ed25519","ranges":[">=0.0.0-0 <0.0.6"],"fixed":["0.0.6"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}