CVE-2025-4432
3 advisories.
crates.io/ring CVE-2025-4432: medium
Some AES functions may panic when overflow checking is enabled in ring
Action: Upgrade ring to 0.17.12 or later.
cargo update -p ring --precise 0.17.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.12 | - |
Fixed versions
| 0.17.12 |
Sources
- osv: GHSA-4p46-pwfr-66x6
- https://nvd.nist.gov/vuln/detail/CVE-2025-4432
- https://github.com/briansmith/ring/pull/2447
- https://github.com/briansmith/ring/commit/ec2d3cf1d91f148c84e4806b4f0b3c98f6df3b38
- https://access.redhat.com/security/cve/CVE-2025-4432
- https://bugzilla.redhat.com/show_bug.cgi?id=2350655
- https://github.com/briansmith/ring
- https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05
- https://rustsec.org/advisories/RUSTSEC-2025-0009.html
CVE-2025-4432 · published · modified · JSON
crates.io/ring CVE-2025-4432: unknown
Some AES functions may panic when overflow checking is enabled.
Action: Upgrade ring to 0.17.12 or later.
cargo update -p ring --precise 0.17.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.17.12 | - |
Fixed versions
| 0.17.12 |
Sources
- osv: RUSTSEC-2025-0009
- https://crates.io/crates/ring
- https://rustsec.org/advisories/RUSTSEC-2025-0009.html
- https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05
CVE-2025-4432 · published · modified · JSON
Go/github.com/briansmith/ring CVE-2025-4432: unknown
Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3678
- https://nvd.nist.gov/vuln/detail/CVE-2025-4432
- https://github.com/briansmith/ring/commit/ec2d3cf1d91f148c84e4806b4f0b3c98f6df3b38
- https://github.com/briansmith/ring/pull/2447
- https://bugzilla.redhat.com/show_bug.cgi?id=2350655
- https://access.redhat.com/security/cve/CVE-2025-4432
- https://github.com/briansmith/ring
- https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05
- https://rustsec.org/advisories/RUSTSEC-2025-0009.html
CVE-2025-4432 · published · modified · JSON