CVE-2024-58262: Dalek CURVE25519-Dalek

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

Affected products

• Dalek CURVE25519-Dalek: before 4.1.3 (fixed in 4.1.3)

Published 2025-07-27. Last modified 2026-06-17.