{"id":"CVE-2026-76234","title":"libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs","summary":"libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping ch…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-347"],"vendor":"libcrux-ecdh","product":"libcrux-ecdh","affected":["libcrux-ecdh < 0.0.6","libcrux-ed25519 < 0.0.6","libcrux-psq < 0.0.7"],"patched":["libcrux-ecdh 0.0.6","libcrux-ed25519 0.0.6","libcrux-psq 0.0.7"],"published":"2026-08-19","updated":"2026-09-24","sourceUpdated":"2026-09-24T20:06:30.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76234","references":[{"url":"https://github.com/celabshq/libcrux/security/advisories/GHSA-435g-fcv3-8j26","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/libcrux-before-cryptographic-implementation-bug-fixes","label":"disclosure@vulncheck.com"},{"url":"https://github.com/cryspen/libcrux/security/advisories/GHSA-435g-fcv3-8j26"},{"url":"https://github.com/cryspen/libcrux/pull/1301"},{"url":"https://github.com/cryspen/libcrux/pull/1319"},{"url":"https://github.com/cryspen/libcrux/pull/1320"},{"url":"https://github.com/cryspen/libcrux/commit/4d6f5d3c2542b6179a6474dec8cfb8b8ddf31a84"},{"url":"https://github.com/cryspen/libcrux/commit/a09022c5811ca7fd1c6d9a239ff294d64ee86734"},{"url":"https://github.com/cryspen/libcrux/commit/f303b6446c19fe9a7c993f61e426023609cd5fac"},{"url":"https://github.com/cryspen/libcrux"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0023.html"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0024.html"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0025.html"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0026.html"}],"tags":["nvd","osv","rust"],"epss":0.00307,"epssPercentile":0.20955,"aliases":["GHSA-435g-fcv3-8j26","RUSTSEC-2026-0023","RUSTSEC-2026-0024","RUSTSEC-2026-0025","RUSTSEC-2026-0026"],"ecosystem":"rust","ingestedAt":"2026-08-20T19:23:09.589Z","slug":"CVE-2026-76234","body":"## Overview\n\nlibcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X25519 secret keys); libcrux-ed25519 performed a duplicated clamping step during key generation; and libcrux-psq panicked instead of propagating an AEADError. These were fixed in the respective patched releases.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-76234)\n\nAffected packages:\n\n- `libcrux-ecdh < 0.0.6`\n- `libcrux-ed25519 < 0.0.6`\n- `libcrux-psq < 0.0.7`\n\nPatched in:\n\n- `libcrux-ecdh 0.0.6`\n- `libcrux-ed25519 0.0.6`\n- `libcrux-psq 0.0.7`\n\nSource: https://osv.dev/vulnerability/GHSA-435g-fcv3-8j26","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":210361,"id":"CVE-2026-76234","ts":1790283144935,"field":"cvss","old":null,"new":"7.5"},{"seq":210360,"id":"CVE-2026-76234","ts":1790283144935,"field":"severity","old":"low","new":"high"}]}