Vulnerabilities

TI-2026-36944 CVE-2026-50185 · GHSA-3rjw-m598-pq24

RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set

MEDIUM 44

RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00157 Published 2026-07-17 Partial fix · 0.5.4 CWE-758

TI-2026-18943 CVE-2026-23519 · GHSA-2gqc-6j2q-83qp

RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz

HIGH 72

RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00558 Published 2026-01-15 Fixed in 0.4.4 CWE-208

Vulnerabilities

Filters

RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set

RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz