CVE-2026-50185

Name of the Vulnerable Software and Affected Versions RustCrypto CMOV versions 0.1.1 through 0.5.3

Description The aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs incorrectly assume that high bits are zero-extended when loading values smaller than a register. Because these bits are actually unspecified, setting high bits (such as [8..] in a Cmov selector or [16..] of self or other in u16 and i16 CmovEq implementations) can lead to incorrect output when calling left.cmovz(&right, condition). This occurs because the inline assembly compares 32 bits of the value against 0 instead of the intended narrower width, causing the csel instruction to select the wrong value.

Recommendations Update RustCrypto CMOV to version 0.5.4.