CVE-2025-52099

CVE-2025-52099 un desbordamiento de enteros en SQLite 3.50.0 A continuación se proporciona una prueba de concepto PoC para desencadenar un desbordamiento de enteros en la función setupLookaside de SQLite 3.50.0. Este desbordamiento ocurre debido a la multiplicación sin verificar de sz nBig, que...

DEBIAN-CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

CVE-2026-87737

mirage-crypto-ec before 2.4.0 (an OCaml package) contains a timing side channel in NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret value. This may allow an attacker to recover cryptographic secrets via timing measurements. The CVSS 3.1 score is 5.9...

EUVD-2026-74623

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

Linux Distros Unpatched Vulnerability : CVE-2026-87737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: th...

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

The pure-PHP X25519 scalar multiplication in phpseclib is not constant-time. Field addition and subtraction each perform a data-dependent conditional modular reduction, so the cost of each Montgomery-ladder step is a linear function of that step's reduction count which is a quantity determined by...

cve-2024-13176-timing-analysis

Instrumented Detection of Low-Amplitude ECDSA Timing Leakage in CVE-2024-13176 This repository contains the research report, website, data, source material, and reproducibility files for an independent study of CVE-2024-13176. The project looks at whether the nonce-related timing condition report...

DEBIAN-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308

phpseclib , a PHP secure communications library, has a non-constant-time X25519 scalar multiplication flaw in versions prior to 3.0.57 and 4.0.1 . The root cause is data-dependent conditional modular reductions in the pure-PHP implementation (Math/PrimeField/Integer.php), which leak per-step timi...

CVE-2026-59183

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...

CVE-2026-73066

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: topology: A potential overflow issue was fixed in amufiesetup. The function cpufreqgetHWmaxfreq returns the maximum frequency in kHz as an unsigned int. However, the function freqinvsetmaxratio receives this frequency in H...

Astra Linux – Vulnerability in Linux, Linux 5.10

preallocelemsandfreelist in kernel/bpf/stackmap.c in the Linux kernel before version 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow, resulting in an out-of-bounds write...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2cdwscllcnt and i2cdwsclhcnt, there may be an overflow issue due to the reliance on the values of the given parameters, including icclk...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT – Avoid u32 multiplication overflow. In the function lpitupdateresidency, there is a possibility of overflow during multiplication, if tsckhz is large enough UINTMAX/1000. The multiplication operation should be replace...