Vulnerabilidades do Ocaml Mirage-crypto-ec
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ocaml Mirage-crypto-ec: 3 registro(s), com versões afetadas e correções.
CVE-2026-87737
Média · 5.9
CWE-208 09/09/2026
An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is…
An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.
CVE-2026-87736
Média · 4.3
CWE-125 09/09/2026
Out-of-bounds Read em Ocaml Mirage-crypto-ec
An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
CVE-2026-87733
Média · 6.2
CWE-295 09/09/2026
Improper Certificate Validation em Ocaml Mirage-crypto-ec
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.