Read the docs

RustCrypto

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

RustCrypto records in CISA KEV

No RustCrypto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sm2 Elliptic Curve 3 records HIGH Cmov 2 records HIGH Rsa 2 records LOW

Records

3 records in Sm2 Elliptic Curve · all components

TI-2026-18227 CVE-2026-22700 · GHSA-j9xq-69pf-pcm8

RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE

Priority HIGH 72

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-01-10 No fix listed CWE-20
TI-2026-18226 CVE-2026-22699 · GHSA-78p6-6878-8mj6

RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()

Priority HIGH 72

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2026-01-10 No fix listed CWE-20
TI-2026-18225 CVE-2026-22698 · GHSA-w3g8-fp6j-wvqw

RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability

Priority MEDIUM 43

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00274 Published 2026-01-10 No fix listed CWE-331
Open these records in search →