2 matches found
golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results
A flaw was found in the crypto/internal/nistec golang library. The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars, such as a scalar larger than the order of the curve. This does not impact usages of crypto/ecds...
5.3CVSS6.6AI score0.00817EPSS
SaveExploits0References8
AZL-37385 CVE-2023-24532 affecting package golang for versions less than 1.21.6-1
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...
5.3CVSS6.6AI score0.00817EPSS
SaveExploits0References1
20