{"id":"CVE-2025-27498","aliases":["GHSA-r38m-44fw-h886"],"url":"https://o3.security/vulnerability/CVE-2025-27498","summary":"AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure","details":"aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3.","published":"2025-03-03T16:52:02.750Z","modified":"2026-07-15T01:49:21.177259868Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"ascon_aead","fixedVersion":"0.4.3"}],"fix":{"url":"https://github.com/RustCrypto/AEADs/commit/d1d749ba57e38e65b0e037cd744d0b17f7254037","label":"RustCrypto/AEADs@d1d749b"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27498.json"},{"type":"ADVISORY","url":"https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27498"},{"type":"FIX","url":"https://github.com/RustCrypto/AEADs/commit/d1d749ba57e38e65b0e037cd744d0b17f7254037"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:21.177259868Z"}}