CVE-2019-9155

A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages…

published August 22, 2019

CVSS
—
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01480 · 73.6th percentile
Published
2019-08-22T15:48Z
EPSS history
Timeline
  • 22 AUG 15:48Z
    A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages…
    cvelistv5