Bitwiseshiftleft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bitwiseshiftleft products: 1 record(s), with severity, exploitation and fixes.

Stanford Javascript Crypto Library 1

Exploited only (KEV) →

CVE-2026-4258 High · 7.5 CWE-347 Mar 17, 2026

Improper Verification of Cryptographic Signature in Bitwiseshiftleft Stanford Javascript Crypto Library

Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-curve public keys and observing ECDH outputs. The dhJavaEc() function directly returns the raw x-coordinate of the scalar multiplication result (no hashing), providing a plaintext oracle without requiring any decryption feedback.