Information Disclosure

elliptic is vulnerable to information disclosure. An attacker can send a malicious w-NAF data with bit length larger than allocated memory via getNAF, leading to a memory leak...