CVE-2024-58262

5.1 mediumEPSS 0.2%

Medium (5.1) in dalek curve25519-dalek. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in curve25519-dalek 4.1.3.

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

Severity

5.1 medium

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-733
Published: 2025-07-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-x4gp-pqpj-f43q	crates.io	curve25519-dalek	<4.1.3	4.1.3
RUSTSEC-2024-0344	crates.io	curve25519-dalek	>=0.0.0-0 <4.1.3	4.1.3