briansmith github.com/briansmith/ring vulnerabilities

Latest briansmith github.com/briansmith/ring CVEs

Newest publication first

1. CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

   Published 2025-05-09

   Medium·CVSS 5.3 EPSS 1.0%

   A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 2**32 packets...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.