https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 06:26:58 +0000 https://db.gcve.eu/vuln/rustsec-2026-0125 <p><strong>Affected:</strong> crates.io: libcrux-ml-dsa</p> <p>The AVX2 implementation of ML-DSA verification incorrectly implemented the `use_hint` function, mishandling an edge case that should lead to signature rejection.</p> <p>## Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if the AVX2 implementation is used.</p> <p>## Mitigation From version `0.0.9` the edge case is handled correctly and invalid signatures are rejected.</p> <p><strong>Affected:</strong> crates.io: libcrux-ml-dsa</p> <p>The AVX2 implementation of ML-DSA verification incorrectly implemented the `use_hint` function, mishandling an edge case that should lead to signature rejection.</p> <p>## Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if the AVX2 implementation is used.</p> <p>## Mitigation From version `0.0.9` the edge case is handled correctly and invalid signatures are rejected.</p> https://db.gcve.eu/vuln/rustsec-2026-0125