Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: RustCrypto Component: Sm2 Elliptic Curve Clear all filters
TI-2026-18227 CVE-2026-22700 · GHSA-j9xq-69pf-pcm8

RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE

Priority HIGH 72

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-01-10 No fix listed CWE-20
TI-2026-18226 CVE-2026-22699 · GHSA-78p6-6878-8mj6

RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()

Priority HIGH 72

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2026-01-10 No fix listed CWE-20
TI-2026-18225 CVE-2026-22698 · GHSA-w3g8-fp6j-wvqw

RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability

Priority MEDIUM 43

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00274 Published 2026-01-10 No fix listed CWE-331