PT-2026-2248 · Unknown · Rust-Crypto

Xlabaiteam · Published 2026-01-09 · Updated 2026-03-12 · CVE-2026-22698

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RustCrypto versions 0.14.0-pre.0 through 0.14.0-rc.0

Description The Elliptic Curves library within RustCrypto, a general-purpose Elliptic Curve Cryptography (ECC) implementation, contains a flaw in its SM2 Public Key Encryption (PKE) implementation. The issue stems from reduced entropy during ephemeral nonce (k) generation, caused by a unit mismatch error requesting only 32 bits of randomness instead of the expected 256 bits. This significantly weakens the encryption, reducing its security from 128 bits to 16 bits, potentially allowing an attacker to recover the nonce and decrypt ciphertext given the public key and ciphertext.

Recommendations Versions prior to 0.14.0-pre.0 and after 0.14.0-rc.0 should be used.

Exploit

Fix

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2026-22698

GHSA-W3G8-FP6J-WVQW

Affected Products

Rust-Crypto

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22698.json · Exploit
• https://github.com/RustCrypto/elliptic-curves/pull/1600 · Patch
• https://github.com/RustCrypto/elliptic-curves/commit/e4f77788130d065d760e57fb109370827110a525 · Patch
• https://github.com/RustCrypto/elliptic-curves/commit/4781762f23ff22ab34763410f648128055c93731 · Patch
• https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-w3g8-fp6j-wvqw · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w3g8-fp6j-wvqw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22698 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22698 · Vendor Advisory
• https://github.com/RustCrypto/elliptic-curves · Note
• https://twitter.com/VulmonFeeds/status/2010002390217318873 · Twitter Post
• https://twitter.com/CVEnew/status/2009866353940066599 · Twitter Post
• https://crates.io/crates/sm2/0.14.0-pre.0 · Note
• https://t.me/CVEtracker/41925 · Telegram Post
• https://twitter.com/pulsepatchio/status/2010358313641554227 · Twitter Post
• https://t.me/cveNotify/155343 · Telegram Post