https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:18:50 +0000 https://db.gcve.eu/vuln/rustsec-2026-0124 <p><strong>Affected:</strong> crates.io: libcrux-chacha20poly1305</p> <p>An application that passes in a ciphertext buffer of length greater than `ptxt.len() + TAG_LEN` to `libcrux_chacha20poly1305::encrypt` or `libcrux_chacha20poly1305::xchacha20_poly1305::encrypt` would experience a panic.</p> <p>## Impact An application where the length of the ciphertext buffer is under attacker control could be made to crash.</p> <p>## Mitigation The fix makes it so that `libcrux_chacha20poly1305::encrypt` and `libcrux_chacha20poly1305::xchacha20_poly1305::encrypt` no longer panic in this case, but instead write out the ciphertext and tag into the first `ptxt.len() + TAG_LEN` bytes of the provided buffer.</p> <p><strong>Affected:</strong> crates.io: libcrux-chacha20poly1305</p> <p>An application that passes in a ciphertext buffer of length greater than `ptxt.len() + TAG_LEN` to `libcrux_chacha20poly1305::encrypt` or `libcrux_chacha20poly1305::xchacha20_poly1305::encrypt` would experience a panic.</p> <p>## Impact An application where the length of the ciphertext buffer is under attacker control could be made to crash.</p> <p>## Mitigation The fix makes it so that `libcrux_chacha20poly1305::encrypt` and `libcrux_chacha20poly1305::xchacha20_poly1305::encrypt` no longer panic in this case, but instead write out the ciphertext and tag into the first `ptxt.len() + TAG_LEN` bytes of the provided buffer.</p> https://db.gcve.eu/vuln/rustsec-2026-0124