CVE-2022-24884

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. "ecdsaverifypreparelegacy" does not check whether the signature values "r" and "s" are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring...