Skip to content
OpenAdvisories

Package · PyPI

fastecdsa

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-21502

    Uninitialized Variable in fastecdsa

    Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it…

    fastecdsa PyPI
  • High 7.5
    CVE-2020-12607

    Improper Verification of Cryptographic Signature in fastecdsa

    An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is …

    fastecdsa PyPI