We found cryptography bugs in the elliptic library using Wycheproof
blog.trailofbits.com | blog | #zero-day | #cryptography | #cve | #vulnerability-disclosure | #javascript | #elliptic | #signature-forgery | #wycheproof
Summary
Trail of Bits used Wycheproof to uncover two flaws in the elliptic JavaScript library, CVE-2024-48949 and CVE-2024-48948, enabling signature forgery or verification failure; one remains unpatched.
- Published
- Collected
--- id: 1318 title: "We found cryptography bugs in the elliptic library using Wycheproof" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/" published_at: "2025-11-18 12:00" tags: ["zero-day", "cryptography", "cve", "vulnerability-disclosure", "javascript", "elliptic", "signature-forgery", "wycheproof"] phying_url: "https://phying.com/item/1318" lang: en --- # We found cryptography bugs in the elliptic library using Wycheproof ## Summary Trail of Bits used Wycheproof to uncover two flaws in the elliptic JavaScript library, CVE-2024-48949 and CVE-2024-48948, enabling signature forgery or verification failure; one remains unpatched. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2025-11-18 12:00 - **Original:** https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/ - **Phying News:** https://phying.com/item/1318