Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2026-24850

Good to know:

icon
icon

Date: January 27, 2026

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto "ml-dsa" crate incorrectly accepts signatures with repeated (duplicate) hint indices. According to the ML-DSA specification (FIPS 204 / RFC 9881), hint indices within each polynomial must be strictly increasing. The current implementation uses a non-strict monotonic check ("<=" instead of "<"), allowing duplicate indices. This is a regression bug. The original implementation was correct, but a commit in version 0.0.4 inadvertently changed the strict "<" comparison to "<=", introducing the vulnerability. Version 0.1.0-rc.4 fixes the issue.

Severity Score

Related Resources (14)

https://github.com/RustCrypto/signatures
https://github.com/RustCrypto/signatures/security/advisories/GHSA-5x2r-hc65-25f9
https://github.com/RustCrypto/signatures/issues/894
https://nvd.nist.gov/vuln/detail/CVE-2026-24850
https://github.com/RustCrypto/signatures/pull/895
https://github.com/C2SP/wycheproof
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_65_verify_test.json
https://github.com/RustCrypto/signatures/commit/b01c3b73dd08d0094e089aa234f78b6089ec1f38
https://csrc.nist.gov/pubs/fips/204/final
https://github.com/RustCrypto/signatures/commit/400961412be2e2ab787942cf30e0a9b66b37a54a
https://datatracker.ietf.org/doc/html/rfc9881
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_87_verify_test.json
https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_44_verify_test.json
https://www.mend.io/vulnerability-database/CVE-2026-24850

Severity Score

Weakness Type (CWE)

Improper Verification of Cryptographic Signature

CWE-347

Top Fix

icon

Upgrade Version

Upgrade to version ml-dsa - 0.1.0-rc.4;https://github.com/RustCrypto/signatures.git - ml-dsa/v0.1.0-rc.4

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us