Home > Vulnerability Database > CVE-2024-58262

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-58262

Good to know:

Date: July 26, 2025

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

Severity Score

2.9

Related Resources (7)

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-58262

Url: https://crates.io/crates/curve25519-dalek

Url: https://rustsec.org/advisories/RUSTSEC-2024-0344.html

Url: https://github.com/dalek-cryptography/curve25519-dalek

Url: https://github.com/dalek-cryptography/curve25519-dalek/commit/415892acf1cdf9161bd6a4c99bc2f4cb8fae5e6a

Url: https://github.com/dalek-cryptography/curve25519-dalek/pull/659

Url: https://www.mend.io/vulnerability-database/CVE-2024-58262

Severity Score

2.9

Weakness Type (CWE)

Observable Discrepancy

CWE-203

Compiler Optimization Removal or Modification of Security-critical Code

CWE-733

Top Fix

Upgrade Version

Upgrade to version curve25519-dalek - 4.1.3;https://github.com/dalek-cryptography/curve25519-dalek.git - curve25519-4.1.3

CVSS v3.1

Base Score:	2.9
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

Do you need more information?

Contact Us