CVE-2025-8556

Low CVSS: 3.7

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Vendor

Product

CWE

CWE-1287

Yayın Tarihi

2025-08-06 09:15:28

Güncelleme

2026-02-25 22:16:22

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-1287 LOW 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-8556 https://bugzilla.redhat.com/show_bug.cgi?id=2371624 https://github.com/cloudflare/circl https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm https://github.com/cloudflare/circl/tree/v1.6.1 https://news.ycombinator.com/item?id=45669593 https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation