cve/2024/CVE-2024-42461.md

CVE-2024-42461

Description

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

POC

Reference

No PoCs from references.

Github

• https://github.com/Alirezarv700/CryptoDeepTools
• https://github.com/Pirtmoppfnx861le/CryptoDeepTools
• https://github.com/demining/CryptoDeepTools
• https://github.com/demining/Signature-Malleability
• https://github.com/fevar54/CVE-2024-42461
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/rileyHoward92/CryptoDeepTools