Dashboard / CVE-2026-6458

CVE-2026-6458

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 45/100
Published: 2026-06-24 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: None
VI: Low
VA: None

Description

Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authentication tag. When the streaming AES-256-GCM API is used with empty AAD, the hardware GHASH accumulator state is not saved after the first update call, causing the final tag to exclude the first batch of processed ciphertext. Ciphertext produced by that call may be modified without the tag reflecting the change. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

45 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.20%
Raw Score 0.001970
Percentile 9.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00197
2026-10-28
0.00197

Intelligence Sources

nvd ref →

External Links