CVE-2024-21502

creationtimestamp| type| source ---|---|--- 2024-02-24 06:26:26+00:00| seen| https://t.me/ctinow/192438 2024-02-24 06:26:32+00:00| seen| https://t.me/ctinow/192441 2025-02-12 19:10:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4131 2025-02-12 22:09:52+00:00|...

CVE-2024-21502

CVE-2024-21502 affects the fastecdsa library prior to 2.3.2. The root cause is a Use of Uninitialized Variable on the stack in the curvemath_mul function (src/curveMath.c), where a value is interpreted as a user-defined type. Depending on the value, an attacker-controlled stack can cause arbitrar...

CVE-2024-21502

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...