Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-24850
Awaiting Analysis
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-28 Jan, 2026 | 01:16
Updated At-29 Jan, 2026 | 16:31

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto `ml-dsa` crate incorrectly accepts signatures with repeated (duplicate) hint indices. According to the ML-DSA specification (FIPS 204 / RFC 9881), hint indices within each polynomial must be **strictly increasing**. The current implementation uses a non-strict monotonic check (`<=` instead of `<`), allowing duplicate indices. This is a regression bug. The original implementation was correct, but a commit in version 0.0.4 inadvertently changed the strict `<` comparison to `<=`, introducing the vulnerability. Version 0.1.0-rc.4 fixes the issue.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Type: Secondary
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CPE Matches
Weaknesses
CWE IDTypeSource
CWE-347Primarysecurity-advisories@github.com
CWE ID: CWE-347
Type: Primary
Source: security-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://csrc.nist.gov/pubs/fips/204/finalsecurity-advisories@github.com
N/A
https://datatracker.ietf.org/doc/html/rfc9881security-advisories@github.com
N/A
https://github.com/C2SP/wycheproofsecurity-advisories@github.com
N/A
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_44_verify_test.jsonsecurity-advisories@github.com
N/A
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_65_verify_test.jsonsecurity-advisories@github.com
N/A
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_87_verify_test.jsonsecurity-advisories@github.com
N/A
https://github.com/RustCrypto/signatures/commit/400961412be2e2ab787942cf30e0a9b66b37a54asecurity-advisories@github.com
N/A
https://github.com/RustCrypto/signatures/commit/b01c3b73dd08d0094e089aa234f78b6089ec1f38security-advisories@github.com
N/A
https://github.com/RustCrypto/signatures/issues/894security-advisories@github.com
N/A
https://github.com/RustCrypto/signatures/pull/895security-advisories@github.com
N/A
https://github.com/RustCrypto/signatures/security/advisories/GHSA-5x2r-hc65-25f9security-advisories@github.com
N/A
Hyperlink: https://csrc.nist.gov/pubs/fips/204/final
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://datatracker.ietf.org/doc/html/rfc9881
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/C2SP/wycheproof
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_44_verify_test.json
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_65_verify_test.json
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_87_verify_test.json
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/RustCrypto/signatures/commit/400961412be2e2ab787942cf30e0a9b66b37a54a
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/RustCrypto/signatures/commit/b01c3b73dd08d0094e089aa234f78b6089ec1f38
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/RustCrypto/signatures/issues/894
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/RustCrypto/signatures/pull/895
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/RustCrypto/signatures/security/advisories/GHSA-5x2r-hc65-25f9
Source: security-advisories@github.com
Resource: N/A
Change History
0Changes found
Details not found