PyPI/fastecdsa CVE-2024-21502: high 7.5, EPSS 1.03%
Uninitialized Variable in fastecdsa
Action: Upgrade fastecdsa to 2.3.2 or later.
pip install fastecdsa==2.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.2 | - |
Fixed versions
| 2.3.2 |
Sources
- osv: GHSA-ph86-g9r3-5qw4
- https://nvd.nist.gov/vuln/detail/CVE-2024-21502
- https://github.com/AntonKueltz/fastecdsa/commit/57fc5689c95d649dab7ef60cc99ac64589f01e36
- https://gist.github.com/keltecc/49da037072276f21b005a8337c15db26
- https://github.com/AntonKueltz/fastecdsa
- https://github.com/AntonKueltz/fastecdsa/blob/v2.3.1/src/curveMath.c%23L210
- https://security.snyk.io/vuln/SNYK-PYTHON-FASTECDSA-6262045
CVE-2024-21502 · published · modified · JSON