RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-23519 · Microsoft / collected KEV context

EUVD-2026-2731

GHSA-2gqc-6j2q-83qp

RUSTSEC-2026-0003

cve-program · CVE-2026-23519

• https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp
• https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778

euvd · EUVD-2026-2731

• https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp
• https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778

nvd · CVE-2026-23519

• https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778
• https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp

osv · GHSA-2gqc-6j2q-83qp

• https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp
• https://nvd.nist.gov/vuln/detail/CVE-2026-23519
• https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778
• https://github.com/RustCrypto/utils
• https://rustsec.org/advisories/RUSTSEC-2026-0003.html

osv · RUSTSEC-2026-0003

• https://crates.io/crates/cmov
• https://rustsec.org/advisories/RUSTSEC-2026-0003.html
• https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778

No related operational record is retained in the current change model.