Rust advisories / libcrux-ml-dsa
Vulnerability HighRUSTSEC-2026-0125 · libcrux-ml-dsa
RUSTSEC-2026-0125: Signature Verification on AVX2 Platforms Mishandles Edge Case
Short answerA security vulnerability in the libcrux-ml-dsa crate: Signature Verification on AVX2 Platforms Mishandles Edge Case. GitHub rates it High. Fixed in 0.0.9: update to a fixed version.
| Crate | libcrux-ml-dsa |
|---|---|
| Type | Vulnerability |
| Affected versions | Before 0.0.9. |
| Fixed in | 0.0.9 |
| Severity | High (GitHub rating) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
| Published | 2026-05-05 |
| Last changed | 2026-05-20 |
| Also known as | GHSA-fhvh-vw7h-9xf3 |
What to do
- See which version you have:
cargo tree -i libcrux-ml-dsa(it also shows which of your dependencies pulls it in). - Update within your version requirement:
cargo update -p libcrux-ml-dsa. If the fix is a newer major or minor than your requirement allows, raise it in Cargo.toml (for examplelibcrux-ml-dsa = "0.0.9") or update the dependency that pulls it in. - Check again with
cargo audit, or paste your Cargo.lock into our Cargo.toml checker.
Details from the advisory
The AVX2 implementation of ML-DSA verification incorrectly implemented the use_hint function, mishandling an edge case that should lead to signature rejection.
Impact
An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if the AVX2 implementation is used.
Mitigation
From version 0.0.9 the edge case is handled correctly and invalid signatures are rejected.
References
- Package: crates.io/crates/libcrux-ml-dsa
- Advisory: rustsec.org/advisories/RUSTSEC-2026-0125.html
- Web: github.com/cryspen/libcrux/pull/1398
- Web: github.com/C2SP/wycheproof/pull/234
- Web: github.com/tink-crypto/tink-go/pull/48
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Other advisories for libcrux-ml-dsa
Up next
Same cratelibcrux-ml-dsa: security historyEvery advisory for this crate, and whether it is safe to use today.Read it next →Did this answer your question?