RUSTSEC-2026-0209

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2026-0209

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0209.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2026-0209

Published

2026-06-09T12:00:00Z

Modified

2026-07-17T11:45:03.763624492Z

Severity

6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

AES-GCM did not enforce limits on AAD length

Details

NIST Special Publication 800-38D specifies that the bit length of the AAD shall not exceed 2^64 - 1 bits. The implementation of AES-GCM in libcrux-aesgcm neither enforced this limit for encryption nor for decryption.

Impact

Use of AES-GCM with AAD of length exceeding the prescribed maximum length degrades the authentication security of the GCM tag.

Mitigation

Starting from version 0.0.9 (published as libcrux-aes@v0.0.9), limits on the length of the AAD input are enforced, so overlong AAD inputs result in an error on encryption and decryption.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / libcrux-aesgcm

Package

Name: libcrux-aesgcm; View open source insights on deps.dev
Purl: pkg:cargo/libcrux-aesgcm

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Ecosystem specific

{
    "affects": {
        "os": [],
        "functions": [
            "libcrux_aesgcm::AesGcm128Key::decrypt",
            "libcrux_aesgcm::AesGcm128Key::encrypt",
            "libcrux_aesgcm::AesGcm256Key::decrypt",
            "libcrux_aesgcm::AesGcm256Key::encrypt",
            "libcrux_aesgcm::aes_gcm_128::AesGcm128::decrypt",
            "libcrux_aesgcm::aes_gcm_128::AesGcm128::encrypt",
            "libcrux_aesgcm::aes_gcm_128::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_128::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_128::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_128::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::NeonAesGcm128::decrypt",
            "libcrux_aesgcm::aes_gcm_128::neon::NeonAesGcm128::encrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::PortableAesGcm128::decrypt",
            "libcrux_aesgcm::aes_gcm_128::portable::PortableAesGcm128::encrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::X64AesGcm128::decrypt",
            "libcrux_aesgcm::aes_gcm_128::x64::X64AesGcm128::encrypt",
            "libcrux_aesgcm::aes_gcm_256::AesGcm256::decrypt",
            "libcrux_aesgcm::aes_gcm_256::AesGcm256::encrypt",
            "libcrux_aesgcm::aes_gcm_256::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_256::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_256::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_256::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::NeonAesGcm256::decrypt",
            "libcrux_aesgcm::aes_gcm_256::neon::NeonAesGcm256::encrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::PortableAesGcm256::decrypt",
            "libcrux_aesgcm::aes_gcm_256::portable::PortableAesGcm256::encrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::Key::decrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::Key::encrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::KeyRef::decrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::KeyRef::encrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::X64AesGcm256::decrypt",
            "libcrux_aesgcm::aes_gcm_256::x64::X64AesGcm256::encrypt"
        ],
        "arch": []
    },
    "affected_functions": null
}

Database specific

source

"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0209.json"