https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T08:57:13.538564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365544 EUVD-2026-365544 2026-10-02T08:57:13.541682+00:00 EUVD-2026-365544 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87737 fkie_cve-2026-87737 2026-10-02T08:57:13.541771+00:00

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

 https://cve.radiocsirt.org/vuln/ghsa-qmhp-mcqx-7ppw GHSA-qmhp-mcqx-7ppw 2026-10-02T08:57:13.541813+00:00

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

 https://cve.radiocsirt.org/vuln/osec-2026-17 OSEC-2026-17 — Timing leak in NIST elliptic curves scalar multiplication 2026-10-02T08:57:13.541840+00:00

Affected: opam: mirage-crypto-ec

The scalar multiplication includes pre-computed tables for speedup (introduced in mirage-crypto-ec 0.11.3). The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table.

## Solution

Instead of using the index `n - 1`, where `n` is secret-dependent, use `i - 1`, as done in the Go reference implementation. If `n` is 0, there is a out-of-bounds read before the patch.

## Timeline - 2026-08-12: report by Eric Ebinger to security@ocaml.org - 2026-08-17: release of mirage-crypto-ec 2.4.0 and this advisory

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87737 UBUNTU-CVE-2026-87737 2026-10-02T08:57:13.541887+00:00

Affected: Ubuntu:22.04:LTS: ocaml-mirage-crypto, Ubuntu:24.04:LTS: ocaml-mirage-crypto, Ubuntu:26.04:LTS: ocaml-mirage-crypto

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.