CVE-2024-58262 in dalek-cryptography curve25519-dalek Crate

Summary

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsible

MITRE

Reservation

07/27/2025

Disclosure

07/27/2025

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
317866	dalek-cryptography curve25519-dalek Crate Elliptic Curve compiler optimization removal or modification of security-critical code	733	Not defined	Official fix	CVE-2024-58262

Sources

• MITRE
• NVD
• CVE Details