CVE-2024-48948

The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.

CVSS v4.0 GitHub

2.3 LOWCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS v3.1 CNA

4.8 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

0.55% chance of exploitation in the next 30 days, 45th percentile

Published

2024-10-15

Updated

2025-11-25

Proof-of-concept exploits (1)

• indutny/elliptic/pull/3221769★ · 2024-11-13

Security advisories

• https://security.netapp.com/advisory/ntap-20241220-0004
• advisories/GHSA-fc9h-whq2-v747

References

• CVE Record
• NVD entry

Related

• CVE-2020-13822
• CVE-2025-14505