The vulnerability of the crypto_core_ed25519_is_valid_point() function in the cryptographic library libsodium, which allows a hacker to execute arbitrary code.

The vulnerability of the cryptocoreed25519isvalidpoint function in the cryptographic library libsodium is related to the use of an incomplete black list. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

OESA-2026-1098 libsodium security update

Sodium is a modern, easy-to-use software library for encryption, decryption, signatures, password hashing and more. It is a portable, cross-compilable, installable6, packageable fork of NaCl, with a compatible API, and an extended API to improve usability even further. Security Fixes: libsodium...

[SECURITY] [DSA 6094-1] libsodium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6094-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 05, 2026 https://www.debian.org/security/faq -...

security/libsodium -- crypto_core_ed25519_is_valid_point mishandles checks for whether an elliptic curve point is valid

Libsodium maintainer reports: The function cryptocoreed25519isvalidpoint, a low-level function used to check if a given elliptic curve point is valid, was supposed to reject points that aren't in the main cryptographic group, but some points were slipping through...