Antonkueltz Fastecdsa
2 CVEs affecting Antonkueltz Fastecdsa. Latest disclosed: 2024-02-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21502 | High | 7.5 | 2024-02-24 | Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c… |
CVE-2020-12607 | High | 7.5 | 2020-06-02 | An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means… |