Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/10/15 3:30 p.m.47 views

Valid ECDSA signatures erroneously rejected in Elliptic

The Elliptic prior to 6.6.0 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an truncateToN anomaly. This leads to...

4.8CVSS9.2AI score0.00553EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder