GO-2026-4550

vendorUSosv

CIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl

view advisory published 2026-02-27Licence: per source

CIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-1229UScritical9.8—
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. E…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan