CVE-2025-67897

MEDIUM5.3EPSS 0.17%

Underflow in aes_key_unwrap function

Published: 12/14/2025Modified: 12/17/2025
Also known as:GHSA-v6x3-9r38-r27qCGA-9h2q-x62v-rph9RUSTSEC-2025-0136

Description

The `aes_key_unwrap` function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value would be interpreted as a huge allocation. The allocator would then fail to allocate the memory and panic. An attacker could trigger this panic by sending a victim an encrypted message whose PKESK or SKESK packet has been specially modified. When the victim decrypts the message, the program would crash.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

References (8)