CVE-2026-6330

Name of the Vulnerable Software and Affected Versions ML-KEM (affected versions not specified)

Description An issue exists in the ARM64 NEON ciphertext comparison where only half of the input is compared. This failure breaks the implicit rejection of the Fujisaki-Okamoto transform—a method used to ensure that a ciphertext has not been tampered with—and weakens IND-CCA2 security, which refers to the security of a system against chosen-ciphertext attacks. Consequently, a decapsulating party may fail to detect a manipulated ciphertext and proceed without the required implicit rejection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.