CVE-2026-63410

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

EUVD-2026-114552

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

CVE-2026-63410

The secp256k1-native Ruby library contains a vulnerability where native constant-time scalar multiplication via Point#mul or scalar_multiply_ct can leak secret scalar information through timing side-channels. This occurs because certain compiler toolchains, specifically GCC 14.3.0, 15.1.0, and 15...

CVE-2026-63410: sgbett secp256k1-native: secp256k1-native is a native C secp256k1 implementation for Ruby

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...