CVE-2024-37880 | Kyber Reference implementation up to 18.x ML-KEM 512 Secret Key ref/poly.c poly_frommsg information exposure

A vulnerability classified as problematic was found in Kyber Reference implementation up to 18.x. Affected by this vulnerability is the function poly_frommsg of the file ref/poly.c of the component ML-KEM 512 Secret Key Handler. The manipulation leads to information exposure through discrepancy.

This vulnerability is known as CVE-2024-37880. The attack can only be done within the local network. There is no exploit available.

It is recommended to apply a patch to fix this issue.