GHSA-2cgv-28vr-rv6j — Vulnerability in libcrux-ml-dsa — Advisory...

HIGH

libcrux incorrectly calculates on aarch64

Published December 4, 2025Updated February 22, 2026Source: osv

Summary

On platforms without the `core::arch::aarch64::vxarq_u64` intrinsic, an unverified fallback in `libcrux-intrinsics` v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused `libcrux-ml-kem` and `libcrux-ml-dsa` to sample incorrectly, yielding incorrect shared secrets and invalid signatures. The issue has been fixed in v0.0.4.

Advisory Timeline

First published December 4, 2025 (312 days ago).
Last revised February 22, 2026 — 80 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Cargo

Update libcrux-ml-dsa to 0.0.4 or later

cargo update -p libcrux-ml-dsa --precise 0.0.4

Cargo

Update libcrux-ml-kem to 0.0.4 or later

cargo update -p libcrux-ml-kem --precise 0.0.4

Cargo

Update libcrux-intrinsics to 0.0.4 or later

cargo update -p libcrux-intrinsics --precise 0.0.4

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (3)

Affects 1 ecosystem: crates.io (3).

Package	Ecosystem	Affected	Fixed In
libcrux-ml-dsa	crates.io	0.0.3	0.0.4
libcrux-ml-kem	crates.io	0.0.3	0.0.4
libcrux-intrinsics	crates.io	0.0.3	0.0.4

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-200
Information ExposureMITRE
CWE-327
Use of a Broken or Risky Cryptographic AlgorithmMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 8.2 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

References

Frequently Asked Questions

What is GHSA-2cgv-28vr-rv6j?: libcrux incorrectly calculates on aarch64 This vulnerability has been assigned a severity rating of HIGH (CVSS score: 8.2/10).
How do I check if my project is affected by GHSA-2cgv-28vr-rv6j?: GHSA-2cgv-28vr-rv6j affects libcrux-ml-dsa, libcrux-ml-kem and libcrux-intrinsics. Use GeekWala's free vulnerability scanner to check your dependencies against GHSA-2cgv-28vr-rv6j and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

8.2

High exploitability or significant impact. Prioritize remediation within days.

Also Known As

RUSTSEC-2025-0133

Related CVEs

CVE-2026-93657
HIGH
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
CVE-2026-18140
HIGH
aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

More crates.io advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies