The vulnerability of the EdDSA digital signature algorithm implementation in EdDSA-Java (ed25519-java) arises from incorrect verification of the EdDSA cryptographic signature. This allows a perpetrator to replace the cryptographic signature with an unauthorized one.

EdDSA-Java ed25519 verification is flawed, enabling an attacker to replace signatures.

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Improper Verification of Cryptographic Signature in SSHJ (CVE-2020-36843)	18 Jun 202519:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to Improper Verification of Cryptographic Signature due to EdDSA (CVE-2020-36843)	30 Sep 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow attackers to create new valid signatures different from previous signatures for a known message CVE-2020-36843	15 Aug 202516:08	–	ibm
CBLMariner	CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1	13 Jan 202601:11	–	cbl_mariner
Chainguard	CVE-2020-36843 vulnerabilities	20 Mar 202504:12	–	cgr
Circl	CVE-2020-36843	13 Mar 202505:44	–	circl
CNNVD	EdDSA-Java 安全漏洞	13 Mar 202500:00	–	cnnvd
CVE	CVE-2020-36843	13 Mar 202500:00	–	cve
Cvelist	CVE-2020-36843	13 Mar 202500:00	–	cvelist
Debian CVE	CVE-2020-36843	13 Mar 202500:00	–	debiancve