Loading...
Skip to main content
GeekWala

CVE-2025-66016 — cggmp21 has a missing check in cggmp24 — CVE Details

CRITICAL

cggmp21 has a missing check in the ZK proof used in CGGMP21

Published November 25, 2025Updated November 27, 2025Source: osv

Summary

### Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. ### Patches * `cggmp21 v0.6.3` is a patch release that contains a fix that introduces this specific missing check * However, cggmp21 recommends upgrading to `cggmp24 v0.7.0-alpha.2` which contains many other security checks as a precaution. Follow [migration guideline](https://github.com/LFDT-Lockness/cggmp21/blob/v0.7.0-alpha.2/CGGMP21_MIGRATION.md) to upgrade. ### Workarounds Update to `cggmp21 v0.6.3`, a minor release that contains a minimal security patch. However, for full mitigation, users will need to upgrade to `cggmp24 v0.7.0-alpha.2` as it contains many more security check implementations. ### Resources Read this [blog post](https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained) to learn more.

Advisory Timeline

  • First published November 25, 2025 (321 days ago).
  • Last revised November 27, 2025 — 2 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Cargo
Update cggmp24 to 0.7.0-alpha.2 or later
cargo update -p cggmp24 --precise 0.7.0-alpha.2
Cargo
Update cggmp21 to 0.6.3 or later
cargo update -p cggmp21 --precise 0.6.3

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (2)

Affects 1 ecosystem: crates.io (2).

PackageEcosystemAffectedFixed In
cggmp24
crates.io
All versions0.7.0-alpha.2
cggmp21
crates.io
All versions0.6.3

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-345
    Insufficient Verification of Data AuthenticityMITRE
  • CWE-347
    Improper Verification of Cryptographic SignatureMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.1 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

Frequently Asked Questions

What is CVE-2025-66016?
cggmp21 has a missing check in the ZK proof used in CGGMP21 This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.1/10).
How do I check if my project is affected by CVE-2025-66016?
CVE-2025-66016 affects cggmp24 and cggmp21. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-66016 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.1

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-m95p-425x-x889
RUSTSEC-2025-0129
RUSTSEC-2025-0130

Related CVEs

More crates.io advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies