Antonkueltz

Fastecdsa

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-21502

Exploit
  • EPSS 0.09%
  • Published 24.02.2024 05:15:44
  • Last modified 12.02.2025 18:49:07

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual...

7.5

CVE-2020-12607

Exploit
  • EPSS 0.17%
  • Published 02.06.2020 21:15:10
  • Last modified 12.02.2025 18:29:08

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the sign...