4 matches found
CVE-2022-44310
In Development IL ecdh before 0.2.0, an attacker can send an invalid point not on the curve as the public key, and obtain the derived shared secret...
7.5CVSS6.8AI score0.00666EPSS
SaveExploits1References1
Code injection
In Development IL ecdh before 0.2.0, an attacker can send an invalid point not on the curve as the public key, and obtain the derived shared secret...
5CVSS7.5AI score0.00666EPSS
SaveExploits1References1Affected Software1
20