← Database

CVE-2022-44310

HIGH CVSS: 7.5 Published: 2023-02-24 Modified: 2026-06-17

Description

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

Affected Platforms

Ecdh Project Ecdh

Weakness Type

CWE-668, CWE-668

References