CVE Explorer
CVE-2026-13758
CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path.
The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so its run time depends on the number of matching leading bytes. This affects all five AEAD modes: GCM, CCM, ChaCha20Poly1305, EAX and OCB. The one-shot *_decrypt_verify helpers are unaffected; they verify the tag inside lib
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"CryptX","product":"CryptX","programFiles":["inc/CryptX_AuthEnc_GCM.xs.inc","inc/CryptX_AuthEnc_CCM.xs.inc","inc/CryptX_AuthEnc_ChaCha20Poly1305.xs.inc","inc/CryptX_AuthEnc_EAX.xs.inc","inc/CryptX_AuthEnc_OCB.xs.inc"],"programRoutines":[{"name":"Crypt::AuthEnc::GCM::decrypt_done"},{"name":"Crypt::AuthEnc::CCM::decrypt_done"},{"name":"Crypt::AuthEnc::ChaCha20Poly1305::decrypt_done"},{"name":"Crypt::AuthEnc::EAX::decrypt_done"},{"name":"Crypt::AuthEnc::OCB::decrypt_done"}],"repo":"https://github.com/DCIT/perl-…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/adp/1/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-208","description":"CWE-208 Observable Timing Discrepancy","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"url":"http://www.openwall.com/lists/oss-security/2026/06/29/19"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/adp/0/references/0
{"tags":["patch"],"url":"https://github.com/DCIT/perl-CryptX/commit/7e56347d420aaf43b2ee1586f4a230492ccf1642.patch"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/cna/references/0
{"tags":["release-notes"],"url":"https://metacpan.org/release/MIK/CryptX-0.088_001/changes"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:8fa4afa944db4cc7c4b03adc546b681175319f7b5fffd95126f73692c3769f85 · sha256:362bff663216d6ef… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.