Medium severity5.9NVD Advisory· Published Sep 9, 2026

CVE-2026-87737

Description

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mirage Crypto Ec/mirage-crypto-ecllm-create
Range: <2.4.0

Patches

Vulnerability mechanics

References

osv.dev/vulnerability/OSEC-2026-17nvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000