Executive brief
libcrux incorrectly calculates on aarch64
Affected products
- crates.io libcrux-ml-dsa
- crates.io libcrux-intrinsics
- crates.io libcrux-ml-kem
Junglewise Threat Intelligence
libcrux incorrectly calculates on aarch64
Severity: medium · CVSS 4 · Published 2025-12-04
Technologies: libcrux-ml-dsa (crates.io), libcrux-intrinsics (crates.io). Vendors: crates.io.
Related threats
- cryspen libcrux-ml-dsa signature verification bypass on AVX2 platforms
- libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case
- RUSTSEC-2026-0125 - Signature Verification on AVX2 Platforms Mishandles Edge Case
- RUSTSEC-2026-0126 - AVX2 Implementation Did Not Fully Reduce Intermediate Values
- libcrux has an Incorrect Check of Signer Response Norm During Verification