CVE-2026-4258

Katalog CVE

CVSS 7.5 · High EPSS 0,34%

Kerentanan Improper Verification of Cryptographic Signature pada bitwiseshiftleft stanford javascript crypto library. Skor CVSS 3.1 7.5 (High) menurut snyk.io.

Deskripsi (NVD)

Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-curve public keys and observing ECDH outputs. The dhJavaEc() function directly returns the raw x-coordinate of the scalar multiplication result (no hashing), providing a plaintext oracle without requiring any decryption feedback.

Rincian

Terbit di NVD

17 Maret 2026

Terakhir diubah

28 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber snyk.io
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-347: Improper Verification of Cryptographic Signature
CWE-325: Missing Cryptographic Step

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 26,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/bitwiseshiftleft/sjcl/commit/ee307459972442a17beebc29dc331fffd8aff796 patch
• https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 exploit · mitigasi · advisory pihak ketiga
• https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 exploit · advisory pihak ketiga
• https://github.com/bitwiseshiftleft/sjcl/blob/master/core/ecc.js%23L454-L461 broken link
• https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15751243