{"id":"RUSTSEC-2025-0136","revision":"f2e92056a4ae49f3b56c154f5aee087a","records":[{"revision":"f2e92056a4ae49f3b56c154f5aee087a","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2025-0136","aliases":["CVE-2025-67897","GHSA-v6x3-9r38-r27q"],"title":"Underflow in aes_key_unwrap function","description":"The `aes_key_unwrap` function would panic if passed a ciphertext\nthat was too short.  In a debug build, it would panic due to a\nsubtraction underflow.  In a release build, it would use the\nsmall negative quantity to allocate a vector.  Since the\nallocator expects an unsigned quantity, the negative value would\nbe interpreted as a huge allocation.  The allocator would then\nfail to allocate the memory and panic.\n\nAn attacker could trigger this panic by sending a victim an\nencrypted message whose PKESK or SKESK packet has been specially\nmodified.  When the victim decrypts the message, the program\nwould crash.","state":0,"publishedAt":"2025-11-07T12:00:00+00:00","modifiedAt":"2025-12-17T06:16:23.047289+00:00","affected":[{"ecosystem":"crates.io","name":"sequoia-openpgp","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"2.1.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","score":null,"severity":null}],"references":["https://crates.io/crates/sequoia-openpgp","https://rustsec.org/advisories/RUSTSEC-2025-0136.html","https://gitlab.com/sequoia-pgp/sequoia/-/blob/b59886e5e7bdf7169ed330f309a6633d131776e5/openpgp/NEWS#L7-L26"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0136","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2025-0136","identifiers":["RUSTSEC-2025-0136","CVE-2025-67897","GHSA-v6x3-9r38-r27q"]},"retained":false,"historicalAffected":[]}],"coverage":[]}