---
id: 1318
title: "We found cryptography bugs in the elliptic library using Wycheproof"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/"
published_at: "2025-11-18 12:00"
tags: ["zero-day", "cryptography", "cve", "vulnerability-disclosure", "javascript", "elliptic", "signature-forgery", "wycheproof"]
phying_url: "https://phying.com/item/1318"
lang: en
---

# We found cryptography bugs in the elliptic library using Wycheproof

## Summary

Trail of Bits used Wycheproof to uncover two flaws in the elliptic JavaScript library, CVE-2024-48949 and CVE-2024-48948, enabling signature forgery or verification failure; one remains unpatched.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-11-18 12:00
- **Original:** https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/
- **Phying News:** https://phying.com/item/1318