An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
| Link | Providers |
|---|---|
| https://osv.dev/vulnerability/OSEC-2026-15 |
|
History
Wed, 09 Sep 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | EC Public Key Out-of-Bounds Read in Mirage‑Crypto‑EC |
Wed, 09 Sep 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-09-09T04:19:00.276Z
Updated: 2026-09-09T04:19:00.276Z
Reserved: 2026-09-09T04:18:59.766Z
Link: CVE-2026-87736
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-09-09T05:18:20.873
Modified: 2026-09-09T16:04:24.933
Link: CVE-2026-87736
Redhat
No data.