RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs assume high bits are zero-extended when loading values smaller than a register, so set high bits such as [8..] in a Cmov selector or [16..] of self or other in the u16 and i16 CmovEq implementations can cause left.cmovz(&right, condition) to produce incorrect output. This issue is fixed in version 0.5.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade rust-gdbUpgrade rust-toolsetUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rustfmtUpgrade amazon-efs-utilsUpgrade rust-analyzerUpgrade rust-toolset-srpm-macrosUpgrade rust-std-static-wasm32-wasip1Upgrade clippyUpgrade rustUpgrade rust-srcUpgrade rust-debugger-commonUpgrade rust-analyzer-debuginfoUpgrade clippy-debuginfoUpgrade rust-lldbUpgrade rust-std-staticUpgrade cargoUpgrade rust-docUpgrade rustfmt-debuginfoUpgrade rust-std-static-wasm32-unknown-unknown | Aug 19, 2026 | Jul 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub