Executive brief
libcrux has an Incorrect Check of Signer Response Norm During Verification
Affected products
- crates.io libcrux-ml-dsa
Junglewise Threat Intelligence
libcrux has an Incorrect Check of Signer Response Norm During Verification
Severity: medium · CVSS 4 · Published 2026-03-26
Technologies: libcrux-ml-dsa (crates.io). Vendors: crates.io.
Related threats
- cryspen libcrux-ml-dsa signature verification bypass on AVX2 platforms
- libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case
- RUSTSEC-2026-0125 - Signature Verification on AVX2 Platforms Mishandles Edge Case
- RUSTSEC-2026-0126 - AVX2 Implementation Did Not Fully Reduce Intermediate Values
- libcrux: Panic in Signature Hint Decoding During Verification