N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-2cgv-28vr-rv6j

GHSA-2cgv-28vr-rv6j: libcrux incorrectly calculates on aarch64

On platforms without the core::arch::aarch64::vxarq_u64 intrinsic, an unverified fallback in libcrux-intrinsics v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused libcrux-ml-kem and libcrux-ml-dsa to sample incorrectly, yielding incorrect shared secrets and invalid signatures.

The issue has been fixed in v0.0.4.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-2cgv-28vr-rv6j

GHSA-2cgv-28vr-rv6j:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
libcrux-intrinsics	rust	= 0.0.3	0.0.4
libcrux-ml-kem	rust	= 0.0.3	0.0.4
libcrux-ml-dsa	rust	= 0.0.3	0.0.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is located in the libcrux-intrinsics crate, specifically within a fallback implementation of the _vxarq_u64 function for the aarch64 architecture. This function is intended to emulate a hardware intrinsic when it's not available on the platform. The analysis of the patch in commit 8d10f45631afd1d93fabb2278dbb388a075b5608 reveals that the vulnerable version of the function passed an incorrect argument to an internal bitwise operation. Specifically, _vshlq_n_u64 was called with b instead of a_xor_b, leading to a flawed calculation. This bug corrupts the output of cryptographic primitives that rely on this function, such as SHA-3, causing libcrux-ml-kem to produce incorrect shared secrets and libcrux-ml-dsa to generate invalid signatures. The vulnerability is triggered during runtime on aarch64 systems that execute this specific fallback code path. The fix corrects the argument, ensuring the calculation is performed as intended.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.