← Database

CVE-2021-38195

CRITICAL CVSS: 9.8 Published: 2021-08-08 Modified: 2026-06-17

Description

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.

Affected Platforms

Parity Libsecp256K1

Weakness Type

CWE-347

References