Lucene search

CVE-2024-21502

🗓️ 24 Feb 2024 05:44:15Reported by snykType

CVE-2024-21502: Use of Uninitialized Variable in fastecdsa before 2.3.

Reporter	Title	Published	Views	Family All 7
OSV	PYSEC-2024-39	24 Feb 202405:15	–	osv
OSV	CVE-2024-21502	24 Feb 202405:15	–	osv
Cvelist	CVE-2024-21502	24 Feb 202405:00	–	cvelist
Veracode	Heap Corruption	26 Feb 202405:56	–	veracode
Vulnrichment	CVE-2024-21502	24 Feb 202405:00	–	vulnrichment
NVD	CVE-2024-21502	24 Feb 202405:15	–	nvd
Prion	Null pointer dereference	24 Feb 202405:15	–	prion

[
  {
    "product": "fastecdsa",
    "versions": [
      {
        "version": "0",
        "lessThan": "2.3.2",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
gist	www.gist.github.com/keltecc/49da037072276f21b005a8337c15db26
security	www.security.snyk.io/vuln/SNYK-PYTHON-FASTECDSA-6262045
github	www.github.com/AntonKueltz/fastecdsa/blob/v2.3.1/src/curveMath.c%23L210
github	www.github.com/AntonKueltz/fastecdsa/commit/57fc5689c95d649dab7ef60cc99ac64589f01e36

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Feb 2024 05:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.000

CWE-457