CVE-2026-22700 affects RustCrypto: Elliptic Curves library versions 0.14.0-pre.0 and 0.14.0-rc.0. A denial-of-service vulnerability exists in the SM2 public-key encryption implementation where the decrypt() function performs unchecked slice::split_at operations on untrusted input buffers. Attackers can submit malformed ciphertext or crafted DER-encoded structures to trigger bounds-check panics that crash the calling thread or process. The vulnerability has been patched in commit e60e991. This affects the general purpose Elliptic Curve Cryptography support library used for representing elliptic curve forms, scalars, points, and cryptographic keys.