Read the docs
TI-2026-11599 Aliases CVE-2026-13758GHSA-55gr-9963-833c

CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in…

Priority LOW 18CWE-208Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-208.

Summary

CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so its run time depends on the number of matching leading bytes. This affects all five AEAD modes: GCM, CCM, ChaCha20Poly1305, EAX and OCB. The one-shot *_decrypt_verify helpers are unaffected; they verify the tag inside libtomcrypt with a constant-time comparison. The timing difference is a tag-verification oracle. An attacker who can submit many candidate tags for the same nonce, ciphertext and associated data while measuring the timing precisely enough may recover the expected tag byte by byte and forge a message that verifies.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00399 34th percentileScored 2026-11-07
Fix Fixed CryptX (MIK): 0.088_001

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MIKCryptXbefore 0.088_0010.088_001Patch availableCNA
  • CryptX VendorMIK Affected before 0.088_001 Fixed in 0.088_001 Patch available CNA

Remediation

  • Fix · CNA CryptX (MIK) Fixed in 0.088_001

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-13758
  2. 2026-10-03 Alias added: GHSA-55gr-9963-833c

References

Patch 1

Other 1

  • TI-2025-27306 CryptX for Perl before version 0.065 contains a dependency that may be susceptible to… CVSS 3.1CRITICAL 9.8
  • TI-2025-27308 Perl CryptX before version 0.087 contains a dependency that may be susceptible to an… CVSS 3.1CRITICAL 9.8
  • TI-2026-30120 Stack-based buffer overflow in MIK CryptX CVSS 3.1HIGH 7.5
  • TI-2026-07597 Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when… CVSS 3.1MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences