GitHub Advisoryadvisory · crates.io

GHSA-c7ph-f7jm-xv4w rPGP's integrity protection of encrypted data was not always checked

MEDIUM Published 2026-02-13 Modified 2026-02-13 Official page ↗
Ecosystem
crates.io
Packages
pgp
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-354
Reviewed
2026-02-13

Affected packages

• crates.io pgp: >= 0.16.0-alpha.0, < 0.19.0 → fixed in 0.19.0

Description

Summary For some messages, rPGP returned incorrectly decrypted data without signaling that integrity protection was invalid. Details When decrypting SEIPD (Symmetrically Encrypted and Integrity Protected Data Packet), rPGP previously did not under all circumstances report the absence of valid integrity protection to callers of the library. Impact While the resulting invalid decryption output is not attacker controlled, its contents may be a security concern if an attacker can gain access to it. Attribution Discovered internally in the course of rPGP development work.

Related

Weakness · CWE (1)

  • CWE-354 Improper Validation of Integrity Check Value weakness

References