CVE-2026-73429 | Eugeny russh up to 0.62.3 Curve25519 curve25519.rs compute_shared_secret out-of-bounds

A vulnerability marked as problematic has been reported in Eugeny russh up to 0.62.3. This affects the function Curve25519Kex::compute_shared_secret of the file russh/src/kex/curve25519.rs of the component Curve25519. This manipulation causes out-of-bounds read.

This vulnerability is handled as CVE-2026-73429. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More