Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-87736

EC Public Key Out-of-Bounds Read in Mirage‑Crypto‑EC

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ocaml
Products
Mirage-crypto-ec
CVE-2026-87733

ECDSA Public Key Point at Infinity Forgery in Mirage‑Crypto‑EC Library

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Ocaml
Products
Mirage-crypto-ec
CVE-2026-87737

Timing Side Channel in NIST Elliptic‑Curve Scalar Multiplication

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ocaml
Products
Mirage-crypto-ec