CVE-2024-37880

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because poly_frommsg in poly.c does not prevent Clang from emitting a vulnerable secret-dependent branch.

• CWE-203
• CWE-203

• https://github.com/antoonpurnal/clangoverExploit
• https://github.com/pq-crystals/kyber/commit/9b8d30698a3e7449aeb34e62339d4176f11e3c6cPatch
• https://news.ycombinator.com/item?id=40577486Not Applicable
• https://pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity/Exploit, Third Party Advisory
• https://twitter.com/purnaltoon/status/1797644696568959476Exploit
• https://github.com/antoonpurnal/clangoverExploit
• https://github.com/pq-crystals/kyber/commit/9b8d30698a3e7449aeb34e62339d4176f11e3c6cPatch
• https://news.ycombinator.com/item?id=40577486Not Applicable
• https://pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity/Exploit, Third Party Advisory
• https://twitter.com/purnaltoon/status/1797644696568959476Exploit

Published

Jun 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37872SQL injection vulnerability in process.php in Itsourcecode B…8.1
• CVE-2024-37873SQL injection vulnerability in view_payslip.php in Itsourcec…9.8
• CVE-2024-37877UERANSIM before 3.2.6 allows out-of-bounds read when a RLS p…5.5
• CVE-2024-37878Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a…6.1
• CVE-2024-37879Improper input validation in /admin/config/save in User-frie…4.8
• CVE-2024-3788Vulnerability in WBSAirback 21.02.04, which involves imprope…6.6
• CVE-2024-37881SiteGuard WP Plugin provides a functionality to customize th…5.3
• CVE-2024-37882Nextcloud Server is a self hosted personal cloud system. A r…8.1
• CVE-2024-37883Nextcloud Deck is a kanban style organization tool aimed at …4.3
• CVE-2024-37884Nextcloud Server is a self hosted personal cloud system. A m…5.4
• CVE-2024-37885The Nextcloud Desktop Client is a tool to synchronize files …7.8
• CVE-2024-37886user_oidc app is an OpenID Connect user backend for Nextclou…4.7