{"id":"GHSA-434g-2637-qmqr","summary":"Elliptic's verify function omits uniqueness validation","details":"The Elliptic package 6.5.5 for Node.js for EDDSA implementation does not perform the required check if the signature proof(s) is within the bounds of the order n of the base point of the elliptic curve, leading to signature malleability. Namely, the `verify` function in `lib/elliptic/eddsa/index.js` omits `sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()` validation.\n\nThis vulnerability could have a security-relevant impact if an application relies on the uniqueness of a signature.","aliases":["CVE-2024-48949"],"modified":"2025-11-27T08:58:32.229825Z","published":"2024-10-10T03:30:44Z","database_specific":{"github_reviewed":true,"nvd_published_at":"2024-10-10T01:15:11Z","severity":"LOW","cwe_ids":["CWE-347"],"github_reviewed_at":"2024-10-10T21:00:04Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48949"},{"type":"WEB","url":"https://github.com/indutny/elliptic/commit/7ac5360118f74eb02da73bdf9f24fd0c72ff5281"},{"type":"WEB","url":"https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof"},{"type":"PACKAGE","url":"https://github.com/indutny/elliptic"},{"type":"WEB","url":"https://github.com/indutny/elliptic/compare/v6.5.5...v6.5.6"},{"type":"WEB","url":"https://security.netapp.com/advisory/ntap-20241227-0003"}],"affected":[{"package":{"name":"elliptic","ecosystem":"npm","purl":"pkg:npm/elliptic"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.5.6"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-434g-2637-qmqr/GHSA-434g-2637-qmqr.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U"}]}