Mirage Crypto Ec
Monthly
Timing side-channel in mirage-crypto-ec before 2.4.0 for OCaml enables remote cryptographic key recovery by exploiting secret-dependent timing variations during NIST elliptic-curve scalar multiplication table lookups. Affected applications performing ECDH key agreement or ECDSA signing - including TLS endpoints built on this library - leak private key material through measurable latency differences. No active exploitation is confirmed (no CISA KEV listing), but the C:H CVSS impact rating accurately reflects that successful key recovery constitutes full confidentiality compromise of the cryptographic material.
Out-of-bounds read in the mirage-crypto-ec OCaml cryptographic library (versions before 2.3.0) allows low-privileged network attackers to crash or disrupt services that parse compressed elliptic curve public keys. The flaw arises from insufficient bounds checking during compressed EC point deserialization, classified under CWE-125. No public exploit has been identified at time of analysis; a vendor-released patch is available in version 2.3.0.
ECDSA signature forgery is possible in mirage-crypto-ec before 2.2.0 for OCaml because the P256, P384, and P521 pub_of_octets functions accept 0x00 - the encoding of the elliptic curve point at infinity - as a valid public key. Any application relying on this library to verify ECDSA signatures against externally-supplied public keys can be deceived into accepting signatures crafted without knowledge of any private key. No public exploit has been identified at time of analysis, but the attack is conceptually elementary for anyone familiar with elliptic curve arithmetic.
Timing side-channel in mirage-crypto-ec before 2.4.0 for OCaml enables remote cryptographic key recovery by exploiting secret-dependent timing variations during NIST elliptic-curve scalar multiplication table lookups. Affected applications performing ECDH key agreement or ECDSA signing - including TLS endpoints built on this library - leak private key material through measurable latency differences. No active exploitation is confirmed (no CISA KEV listing), but the C:H CVSS impact rating accurately reflects that successful key recovery constitutes full confidentiality compromise of the cryptographic material.
Out-of-bounds read in the mirage-crypto-ec OCaml cryptographic library (versions before 2.3.0) allows low-privileged network attackers to crash or disrupt services that parse compressed elliptic curve public keys. The flaw arises from insufficient bounds checking during compressed EC point deserialization, classified under CWE-125. No public exploit has been identified at time of analysis; a vendor-released patch is available in version 2.3.0.
ECDSA signature forgery is possible in mirage-crypto-ec before 2.2.0 for OCaml because the P256, P384, and P521 pub_of_octets functions accept 0x00 - the encoding of the elliptic curve point at infinity - as a valid public key. Any application relying on this library to verify ECDSA signatures against externally-supplied public keys can be deceived into accepting signatures crafted without knowledge of any private key. No public exploit has been identified at time of analysis, but the attack is conceptually elementary for anyone familiar with elliptic curve arithmetic.