CVE-2023-24532: vulnerability in Go standard library crypto/internal/nistec
Incorrect calculation on P256 curves in crypto/internal/nistec
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.8%
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
Affected products
Go standard library · crypto/internal/nistecRelated CVEs — Go standard library crypto/internal/nistec
In the same product, most dangerous first.