VULNERABILITY INTELLIGENCE

CVE-2022-44310

CVSS score7.5 HIGH

EPSS probability0.67%

CISA KEVNot currently listed

Published2023-02-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

Weakness classification

nvd@nist.gov: CWE-668
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-668

Primary references

cve@mitre.org — Exploit, Issue Tracking
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking