High severityNVD Advisory· Published Mar 8, 2023· Updated Feb 28, 2025

Incorrect multiplication of unreduced P-256 scalars in filippo.io/nistec

CVE-2023-24533

Description

Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
filippo.io/nistecGo	< 0.0.2	0.0.2

Affected products

ghsa-coords
pkg:golang/filippo.io/nistec
Range: < 0.0.2
filippo.io/nistec/filippo.io/nistecv5
Range: 0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-f6hc-9g49-xmx7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-24533ghsaADVISORY
github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244ghsaWEB
go.dev/issue/58647ghsaWEB
pkg.go.dev/vuln/GO-2023-1595ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000