CVE Catalog
CVE-2024-9143
LowSummary
Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.
Risk Assessment
Out-of-bounds memory writes can lead to application crashes or even remote code execution.
Recommendation
It is recommended to avoid using low-level GF(2^m) APIs with untrusted data or update the cryptographic library to a version containing fixes.
Original NVD description (English source)
Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, how