Most recent entries from all

EUVD-2026-60367

fkie_cve-2019-25003

An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.

GHSA-hrjm-c879-pp86 — libsecp256k1 contains side-channel timing attack

Affected: crates.io: libsecp256k1

Versions of libsecp256k1 prior to 0.3.1 did not execute `Scalar::check_overflow` in constant time. This allows an attacker to potentially leak information via a timing attack. The flaw was corrected by modifying `Scalar::check_overflow` to execute in constant time.

gsd-2019-25003

RUSTSEC-2019-0027 — Flaw in Scalar::check_overflow allows side-channel timing attack

Affected: crates.io: libsecp256k1

Versions of `libsecp256k1` prior to `0.3.1` did not execute Scalar::check_overflow in constant time.

This allows an attacker to potentially leak information via a timing attack.

The flaw was corrected by modifying Scalar::check_overflow to execute in constant time.