JLSEC-2026-695 The X25519 `x86_64` assembly implementation fails to clear the most significant bit during the final...

The X25519 x8664 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the field prime 2^255 - 19. This can leave the field element in a non-canonical form, producing an incorrect result from the...

CVE-2026-10512

The X25519 x8664 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the field prime 2^255 - 19. This can leave the field element in a non-canonical form, producing an incorrect result from the...

CVE-2024-26317: Use of a Broken or Risky Cryptographic Algorithm

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

CVE-2024-26317

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

CVE-2024-54137

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is incorrectly treat...

PT-2024-36065

Name of the Vulnerable Software and Affected Versions: liboqs versions prior to 0.12.0 Description: A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism in liboqs, a C-language cryptographic library. The error is due to an indexing issue,...

CVE-2017-7781

An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINTATINFINITY" when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an...

PT-2017-17940

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Description An error in the elliptic curve point addition algorithm can yield an incorrect result, potentially allowing a man-in-the-middle attacker to interfere with a connection and cause the attacked party to...