CVE-2026-76234

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-76234
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76234.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-76234
Aliases
Published
2026-08-19T14:02:14Z
Modified
2026-08-23T03:42:54Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
libcrux before 0.0.6 Cryptographic Implementation Bug Fixes
Details

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X25519 secret keys); libcrux-ed25519 performed a duplicated clamping step during key generation; and libcrux-psq panicked instead of propagating an AEADError. These were fixed in the respective patched releases.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76234.json"
}
References

Affected packages

Git / github.com/celabshq/libcrux

Affected ranges

Type
GIT
Repo
https://github.com/celabshq/libcrux
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c5fb80f37530ee9b2df9501ae5ff8cb4a973a4bd
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.0.6"
        },
        {
            "fixed": "0.0.7"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

cavp-v0.*
cavp-v0.0.2
cavp-v0.0.2-alpha.3
cavp-v0.0.2-beta.2
cavp-v0.0.2-beta.3
Other
core-models
libcrux-curve25519
libcrux-ecdh
libcrux-ed25519
libcrux-hacl-rs
libcrux-hkdf
libcrux-hmac
libcrux-intrinsics
libcrux-macros
libcrux-p256
libcrux-sha2
libcrux-traits
core-models-v0.*
core-models-v0.0.3-alpha.3
core-models-v0.0.4
core-models-v0.0.4-pre.1
core-models-v0.0.5
libcrux-aead-v0.*
libcrux-aead-v0.0.4
libcrux-aead-v0.0.4-pre.1
libcrux-aead-v0.0.5
libcrux-aesgcm-v0.*
libcrux-aesgcm-v0.0.4
libcrux-aesgcm-v0.0.4-pre.1
libcrux-aesgcm-v0.0.5
libcrux-aesgcm-v0.0.6
libcrux-blake2-v0.*
libcrux-blake2-v0.0.2
libcrux-blake2-v0.0.2-beta.3
libcrux-blake2-v0.0.3
libcrux-blake2-v0.0.3-alpha.1
libcrux-blake2-v0.0.4
libcrux-blake2-v0.0.4-pre.1
libcrux-blake2-v0.0.5
libcrux-chacha20poly1304-v0.*
libcrux-chacha20poly1304-v0.0.5
libcrux-chacha20poly1305-v0.*
libcrux-chacha20poly1305-v0.0.2
libcrux-chacha20poly1305-v0.0.2-beta.3
libcrux-chacha20poly1305-v0.0.3
libcrux-chacha20poly1305-v0.0.3-alpha.1
libcrux-chacha20poly1305-v0.0.3-alpha.3
libcrux-chacha20poly1305-v0.0.4
libcrux-chacha20poly1305-v0.0.4-pre.1
libcrux-curve25519-v0.*
libcrux-curve25519-v0.0.3-alpha.1
libcrux-curve25519-v0.0.3-alpha.3
libcrux-curve25519-v0.0.4
libcrux-curve25519-v0.0.4-pre.1
libcrux-curve25519-v0.0.5
libcrux-digest-v0.*
libcrux-digest-v0.0.4
libcrux-digest-v0.0.4-pre.1
libcrux-digest-v0.0.5
libcrux-ecdh-v0.*
libcrux-ecdh-v0.0.2-alpha.3
libcrux-ecdh-v0.0.2-beta.3
libcrux-ecdh-v0.0.3-alpha.1
libcrux-ecdh-v0.0.4
libcrux-ecdh-v0.0.4-pre.1
libcrux-ecdh-v0.0.5
libcrux-ecdsa-v0.*
libcrux-ecdsa-v0.0.2
libcrux-ecdsa-v0.0.2-beta.3
libcrux-ecdsa-v0.0.3
libcrux-ecdsa-v0.0.3-alpha.1
libcrux-ecdsa-v0.0.4
libcrux-ecdsa-v0.0.4-pre.1
libcrux-ecdsa-v0.0.5
libcrux-ed25519-v0.*
libcrux-ed25519-v0.0.2-beta.3
libcrux-ed25519-v0.0.3-alpha.1
libcrux-ed25519-v0.0.4
libcrux-ed25519-v0.0.4-pre.1
libcrux-ed25519-v0.0.5
libcrux-hacl-rs-v0.*
libcrux-hacl-rs-v0.0.2-beta.3
libcrux-hacl-rs-v0.0.3-alpha.1
libcrux-hacl-rs-v0.0.3-alpha.3
libcrux-hacl-rs-v0.0.4
libcrux-hacl-rs-v0.0.4-pre.1
libcrux-hacl-v0.*
libcrux-hacl-v0.0.2-alpha.3
libcrux-hkdf-v0.*
libcrux-hkdf-v0.0.2-alpha.3
libcrux-hkdf-v0.0.2-beta.3
libcrux-hkdf-v0.0.3-alpha.1
libcrux-hkdf-v0.0.4
libcrux-hkdf-v0.0.4-pre.1
libcrux-hkdf-v0.0.5
libcrux-hmac-v0.*
libcrux-hmac-v0.0.2-alpha.3
libcrux-hmac-v0.0.2-beta.3
libcrux-hmac-v0.0.3-alpha.1
libcrux-hmac-v0.0.4
libcrux-hmac-v0.0.4-pre.1
libcrux-hmac-v0.0.5
libcrux-intrinsics-v0.*
libcrux-intrinsics-v0.0.2-alpha.2
libcrux-intrinsics-v0.0.2-alpha.3
libcrux-intrinsics-v0.0.2-beta.3
libcrux-intrinsics-v0.0.4
libcrux-intrinsics-v0.0.4-pre.1
libcrux-intrinsics-v0.0.5
libcrux-kem-v0.*
libcrux-kem-v0.0.2
libcrux-kem-v0.0.2-alpha.3
libcrux-kem-v0.0.2-beta.3
libcrux-kem-v0.0.3
libcrux-kem-v0.0.3-alpha.1
libcrux-kem-v0.0.3-alpha.3
libcrux-kem-v0.0.4
libcrux-kem-v0.0.4-pre.1
libcrux-kem-v0.0.5
libcrux-macros-v0.*
libcrux-macros-v0.0.2-beta.3
libcrux-macros-v0.0.3-alpha.1
libcrux-ml-dsa-v0.*
libcrux-ml-dsa-v0.0.2
libcrux-ml-dsa-v0.0.2-beta.3
libcrux-ml-dsa-v0.0.3
libcrux-ml-dsa-v0.0.3-alpha.1
libcrux-ml-dsa-v0.0.3-alpha.3
libcrux-ml-dsa-v0.0.4
libcrux-ml-dsa-v0.0.4-pre.1
libcrux-ml-dsa-v0.0.5
libcrux-ml-dsa-v0.0.6
libcrux-ml-kem-v0.*
libcrux-ml-kem-v0.0.2
libcrux-ml-kem-v0.0.2-alpha.2
libcrux-ml-kem-v0.0.2-alpha.3
libcrux-ml-kem-v0.0.2-beta.3
libcrux-ml-kem-v0.0.3
libcrux-ml-kem-v0.0.3-alpha.1
libcrux-ml-kem-v0.0.3-alpha.3
libcrux-ml-kem-v0.0.4
libcrux-ml-kem-v0.0.4-pre.1
libcrux-ml-kem-v0.0.5
libcrux-ml-kem-v0.0.6
libcrux-p256-v0.*
libcrux-p256-v0.0.2-beta.3
libcrux-p256-v0.0.3-alpha.1
libcrux-p256-v0.0.4
libcrux-p256-v0.0.4-pre.1
libcrux-p256-v0.0.5
libcrux-platform-v0.*
libcrux-platform-v0.0.2-alpha.2
libcrux-platform-v0.0.2-alpha.3
libcrux-platform-v0.0.2-beta.3
libcrux-platform-v0.0.3
libcrux-poly1305-v0.*
libcrux-poly1305-v0.0.2
libcrux-poly1305-v0.0.3
libcrux-poly1305-v0.0.3-alpha.1
libcrux-poly1305-v0.0.3-alpha.3
libcrux-poly1305-v0.0.4
libcrux-poly1305-v0.0.4-pre.1
libcrux-poly1305-v0.0.4-pre.2
libcrux-psq-v0.*
libcrux-psq-v0.0.2
libcrux-psq-v0.0.2-beta.3
libcrux-psq-v0.0.3
libcrux-psq-v0.0.3-alpha.1
libcrux-psq-v0.0.3-alpha.3
libcrux-psq-v0.0.5
libcrux-psq-v0.0.5-pre.1
libcrux-psq-v0.0.6
libcrux-rsa-v0.*
libcrux-rsa-v0.0.2
libcrux-rsa-v0.0.2-beta.3
libcrux-rsa-v0.0.3
libcrux-rsa-v0.0.4
libcrux-rsa-v0.0.4-pre.1
libcrux-rsa-v0.0.5
libcrux-secrets-v0.*
libcrux-secrets-v0.0.3
libcrux-secrets-v0.0.3-alpha.1
libcrux-secrets-v0.0.4
libcrux-secrets-v0.0.4-pre.1
libcrux-secrets-v0.0.5
libcrux-sha2-v0.*
libcrux-sha2-v0.0.3-alpha.1
libcrux-sha2-v0.0.3-alpha.3
libcrux-sha2-v0.0.4
libcrux-sha2-v0.0.4-pre.1
libcrux-sha2-v0.0.5
libcrux-sha3-v0.*
libcrux-sha3-v0.0.2
libcrux-sha3-v0.0.2-alpha.2
libcrux-sha3-v0.0.2-alpha.3
libcrux-sha3-v0.0.2-beta.2
libcrux-sha3-v0.0.2-beta.3
libcrux-sha3-v0.0.3
libcrux-sha3-v0.0.3-alpha.3
libcrux-sha3-v0.0.4
libcrux-sha3-v0.0.4-pre.1
libcrux-sha3-v0.0.5
libcrux-sha3-v0.0.6
libcrux-test-util-v0.*
libcrux-test-util-v0.0.3-alpha.1
libcrux-test-utils-v0.*
libcrux-test-utils-v0.0.3
libcrux-traits-v0.*
libcrux-traits-v0.0.3-alpha.1
libcrux-traits-v0.0.4
libcrux-traits-v0.0.4-pre.1
libcrux-traits-v0.0.5
v0.*
v0.0.1
v0.0.2-alpha.3
v0.0.2-pre.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76234.json"