260 matches found
reverie
Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie is an implementation prover and verifier of the MPC-in-the-head NIZKPoK outlined in Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie seeks to offer concrete prover efficien...
PT-2026-128119
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpc validate xid function sets grp-saved xid2-xid2 flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-saved xid2 is never...
Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing an attacker with a compromised lower-leve...
PT-2026-125556
Name of the Vulnerable Software and Affected Versions mpc-lib affected versions not specified Description A cryptographic implementation flaw in the mpc-lib library used in the MPC-based custody pipeline breaks the security guarantee of BIP32 hardened derivation. The issue occurs because the...
Interflow: Breaking the Offline-Online Barrier for Private AI at the Edge
Privacy-preserving machine learning PPML offers a promising path toward bringing powerful AI services to the edge without exposing sensitive user data. However, its practical deployment remains constrained by the high communication, computation, and data-movement costs of secure multi-party...
Akai MPC Sample 1.3.0.12 Path Traversal
Akai MPC Sample version 1.3.0.12 contains a path traversal vulnerability in its built-in web server that allows unauthenticated file reads outside the webroot through the USB-C virtual Ethernet interface. https://packetstorm.news/download/236153...
Think Locally Before Computing Jointly: Efficient Secure Multi-Party Computation Via Maximizing Local Processing
Secure multi-party computation MPC lets parties evaluate a function over private inputs without revealing them. In garbled-circuit GC protocols, prior optimization has largely treated the number of non-linear gates, especially AND gates, as a proxy for cryptographic cost, and has focused on...
PT-2026-104377
Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The next dev development server exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allows a malicious website visited by a developer to access...
MPC-server Model Context Protocol Disclosure
The vulnerability of the uploadattachment function in MPC-servers for Atlassian Model Context Protocol MCP products is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
The Native-Signature Boundary in Post-Quantum Distributed Authorization
Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures...
Malicious code in @zalastax/nolb-mpc (npm)
The package @zalastax/nolb-mpc was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2026-42721
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters. On MX Series devices with MPC10/11, LC4800/9600, and MX304 with subscribers...
EUVD-2026-41218
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36909
A NULL pointer dereference in the AP4TkhdAtom::GetTrackId function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36912
A NULL pointer dereference in the AP4AtomSampleTable::GetSample function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36909
A NULL pointer dereference in the AP4TkhdAtom::GetTrackId function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36911
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36911
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...