Skip to content
OpenAdvisories

Package · crates.io

secp256k1

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-969w-q74q-9j8v

    Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code

    Because of incorrect bounds on method `Secp256k1::preallocated_gen_new` it was possible to cause use-after-free from safe consumer code. It was also possible to "free" memory not allocated by the appropriate allocator. The method takes a place for storing the…

    secp256k1 crates.io