Executive brief
AVX2 Implementation Did Not Fully Reduce Intermediate Values
Affected products
- crates.io libcrux-ml-dsa
Junglewise Threat Intelligence
RUSTSEC-2026-0126 - AVX2 Implementation Did Not Fully Reduce Intermediate Values
Severity: info ยท Published 2026-04-27
Technologies: libcrux-ml-dsa (crates.io). Vendors: crates.io.
Related threats
- cryspen libcrux-ml-dsa signature verification bypass on AVX2 platforms
- libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case
- RUSTSEC-2026-0125 - Signature Verification on AVX2 Platforms Mishandles Edge Case
- libcrux has an Incorrect Check of Signer Response Norm During Verification
- libcrux: Panic in Signature Hint Decoding During Verification