Description
In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Published:
2026-11-10
Score:
n/a
EPSS:
n/a
KEV:
No
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: Google_Devices
Published:
Updated: 2026-11-10T19:21:45.849Z
Reserved: 2026-07-02T05:51:13.097Z
Link: CVE-2026-58803
No data.
Status : Received
Published: 2026-11-10T20:19:27.267
Modified: 2026-11-10T20:19:27.267
Link: CVE-2026-58803
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.