Use of a Broken or Risky Cryptographic Algorithm Affecting libcrux-intrinsics package, versions >=0.0.3 <0.0.4
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-LIBCRUXINTRINSICS-14192427
- published5 Dec 2025
- disclosed4 Dec 2025
- creditUnknown
Introduced: 4 Dec 2025
New CVE NOT AVAILABLE CWE-200 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade libcrux-intrinsics to version 0.0.4 or higher.
Overview
libcrux-intrinsics is a formally verified cryptographic library in Rust.
Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm on platforms without the core::arch::aarch64::vxarq_u64 intrinsic. An attacker can obtain incorrect cryptographic outputs, such as corrupted digests, invalid signatures, or incorrect shared secrets, by leveraging the faulty fallback implementation.