CVE-2025-27498 - CVE House
Back to Database
Status published Medium CVE-2025-27498

AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure

Vulnerability Description

aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27498

Credits & Attribution

No credits recorded in the NVD database.

References

More from RustCrypto

View All →
CVE-2023-49092
RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels
Medium 5.9
CVE-2023-42811
AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
Medium 4.7

Affected Vendor

Affected Software

AEADs
Vulnerable Versions:
< 0.4.3

Timeline

Official Publish: March 3rd, 2025
Last Modified: March 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-347

MITRE ATT&CK TTPs

T1553 Subvert Trust Controls
Defense Evasion
T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1565 Data Manipulation
Impact