CVE-2023-44273

Summary

CVE-2023-44273 is a vulnerability affecting Consensys gnark-crypto up to version 0.11.2. This issue allows signature malleability, enabling an attacker to modify the signature of a message without altering its verification. The root cause is the lack of proper deserialization checks for EdDSA and ECDSA signatures, allowing data outside the intended interval to be processed. This vulnerability poses a significant risk to the integrity of digital signatures and could lead to unauthorized access or data manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.