CVE-2026-1229

CriticalCVSS 9.8

Published: 24/02/2026(UTC)Updated: 17/06/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Summary

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3.

Risk Assessment

Incorrect results from CombinedMult can lead to faulty cryptographic computations in applications that use it directly. ECDH and ECDSA are not affected, so the risk to typical TLS use cases is limited.

Recommendation

Update the CIRCL package to version v1.6.3 or later. Check whether the application calls CombinedMult directly.

Other vulnerabilities in CIRCL

CVE-2025-8556Low
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS