Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/25 6:31 p.m.17 views

GHSA-346H-749J-R28W PHPECC vulnerable to multiple cryptographic side-channel attacks

ECDSA Canonicalization PHPECC is vulnerable to malleable ECDSA signature attacks. Constant-Time Signer When generating a new ECDSA signature, the GMPMath adapter was used. This class wraps the GNU Multiple Precision arithmetic library GMP, which does not aim to provide constant-time implementatio...

9.1CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder