GO-2026-4503
Invalid result or undefined behavior in filippo.io/edwards25519
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-26958
- Alias
- GHSA-fw7p-63qq-7hpr
Description
Previously, if MultiScalarMult was invoked on an initialized point who was not the identity point, MultiScalarMult produced an incorrect result. If called on an uninitialized point, MultiScalarMult exhibited undefined behavior.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · filippo.io/edwards25519 | introduced 0, fixed 1.1.1 |
Références
- https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr ADVISORY
- https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |