Executive brief
Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
Affected products
- crates.io aws-lc-fips-sys
- crates.io aws-lc-sys
Junglewise Threat Intelligence
CVE-2026-3337: RUSTSEC-2026-0043 - Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
CVE-2026-3337 · Severity: low · CVSS 3.1 · Published 2026-03-02
Technologies: aws-lc-sys (crates.io). Vendors: crates.io.
Related threats
- AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
- RUSTSEC-2026-0044 - AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
- RUSTSEC-2026-0048 - CRL Distribution Point Scope Check Logic Error in AWS-LC
- AWS AWS-LC signature verification bypass in PKCS7_verify
- AWS AWS-LC certificate chain validation bypass in PKCS7_verify