CVE-2026-50185Disclosure(rustcrypto / cmov)

LOWCVSS 3.3 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs assume high bits are zero-extended when loading values smaller than a register, so set high bits such as [8..] in a Cmov selector or [16..] of self or other in the u16 and i16 CmovEq implementations can cause left.cmovz(&right, condition) to produce incorrect output. This issue is fixed in version 0.5.4.

rustcrypto CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/RustCrypto/utils/commit/dba6c355c9f241e3726d5ec2a68f9f3b519f6063

Exploit / PoC references

Other references

https://github.com/RustCrypto/utils/releases/tag/cmov-v0.5.4

Weakness type (CWE)

CWE-758

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cmov

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

rustcrypto

Products

cmov

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-50185 RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the c… https://www.cve.org/CVERecord?id=CVE-2026-50185 ----- Traducción: CVE-2026-50185 Rus… http://infoflow.cloud`
Post summary
The message announces CVE-2026-50185, providing technical details about its constant‑time CMOV behavior, but does not discuss PoC, exploits, patches, or active exploitation.
0000036
92 followersView on X
CVE@CVEnew92d
General
CVE-2026-50185 RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the c… https://www.cve.org/CVERecord?id=CVE-2026-50185
Post summary
The excerpt references CVE-2026-50185 and offers a brief technical description of conditional move intrinsics, but lacks any PoC, exploit, mitigation, or active‑exploitation information.
00000720
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	rustcrypto	cmov	-	rust	-

Explore more

Back to dashboard rustcrypto CVEs cmov vulnerabilities