CVE-2026-76234
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X25519 secret keys); libcrux-ed25519 performed a duplicated clamping step during key generation; and libcrux-psq panicked instead of propagating an AEADError. These were fixed in the respective patched releases.
- CVSS 4.0
- 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-26)
- CWE
- CWE-347
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-435g-fcv3-8j26 | crates.io | libcrux-ecdh | <0.0.6 | 0.0.6 |
| GHSA-435g-fcv3-8j26 | crates.io | libcrux-ed25519 | <0.0.6 | 0.0.6 |
| GHSA-435g-fcv3-8j26 | crates.io | libcrux-psq | <0.0.7 | 0.0.7 |
| RUSTSEC-2026-0023 | crates.io | libcrux-ecdh | >=0.0.0-0 <0.0.6 | 0.0.6 |
| RUSTSEC-2026-0024 | crates.io | libcrux-psq | >=0.0.0-0 <0.0.7 | 0.0.7 |
| RUSTSEC-2026-0025 | crates.io | libcrux-psq | >=0.0.0-0 <0.0.7 | 0.0.7 |
| RUSTSEC-2026-0026 | crates.io | libcrux-ed25519 | >=0.0.0-0 <0.0.6 | 0.0.6 |