CVE-2024-33851

phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition

Medium · published April 27, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. (This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library.)

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00408 · 34.0th percentile
Published
2024-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition
    cvelistv5