What’s Vulnerable › Products

RustCrypto elliptic-curves vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your RustCrypto elliptic-curves version is affected

Latest RustCrypto elliptic-curves vulnerabilities

• CVE-2026-22700 — RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE (CVSS 7.5)
• CVE-2026-22699 — RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() (CVSS 7.5)
• CVE-2026-22698 — RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability (CVSS 7.5)