CVE-2021-45709: CRYPTO2 Project CRYPTO2

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur.

Affected products

• CRYPTO2 Project CRYPTO2: any version

Published 2021-12-27. Last modified 2026-06-17.