Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/08 9:5 p.m.6 views

CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...

5.6CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder