CVE-2026-4258

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-4258
All versions of the package sjcl are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-curve public keys and observing ECDH outputs. The dhJavaEc() function directly returns the raw x-coordinate of the scalar multiplication result (no hashing), providing a plaintext oracle without requiring any decryption feedback.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 Third Party Advisory Exploit Mitigation
https://github.com/bitwiseshiftleft/sjcl/blob/master/core/ecc.js%23L454-L461 Broken Link
https://github.com/bitwiseshiftleft/sjcl/commit/ee307459972442a17beebc29dc331fffd8aff796 Patch
https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 Exploit Third Party Advisory
https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 Third Party Advisory Exploit Mitigation
https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bitwiseshiftleft:stanford_javascript_crypto_library:*:*:*:*:*:node.js:*:*
History

03 Jun 2026, 14:47

Type Values Removed Values Added
References () https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 - () https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 - Third Party Advisory, Exploit, Mitigation
References () https://github.com/bitwiseshiftleft/sjcl/blob/master/core/ecc.js%23L454-L461 - () https://github.com/bitwiseshiftleft/sjcl/blob/master/core/ecc.js%23L454-L461 - Broken Link
References () https://github.com/bitwiseshiftleft/sjcl/commit/ee307459972442a17beebc29dc331fffd8aff796 - () https://github.com/bitwiseshiftleft/sjcl/commit/ee307459972442a17beebc29dc331fffd8aff796 - Patch
References () https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 - () https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 - Exploit, Third Party Advisory
CPE cpe:2.3:a:bitwiseshiftleft:stanford_javascript_crypto_library:*:*:*:*:*:node.js:*:*
Summary
  • (es) Todas las versiones del paquete sjcl son vulnerables a la Verificación Incorrecta de Firma Criptográfica debido a la falta de validación de punto en curva en sjcl.ecc.basicKey.publicKey(). Un atacante puede recuperar la clave privada ECDH de una víctima enviando claves públicas fuera de curva manipuladas y observando las salidas ECDH. La función dhJavaEc() devuelve directamente la coordenada x sin procesar del resultado de la multiplicación escalar (sin hashing), proporcionando un oráculo de texto plano sin requerir ninguna retroalimentación de descifrado.
First Time Bitwiseshiftleft stanford Javascript Crypto Library
Bitwiseshiftleft

17 Mar 2026, 14:20

Type Values Removed Values Added
References () https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 - () https://gist.github.com/Kr0emer/2560f98edb10b0b34f2438cd63913c47 -
References () https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 - () https://security.snyk.io/vuln/SNYK-JS-SJCL-15369617 -
CWE CWE-325

17 Mar 2026, 06:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-17 06:16

Updated : 2026-06-03 14:47

NVD link : CVE-2026-4258

Mitre link : CVE-2026-4258

CVE.ORG link : CVE-2026-4258

JSON object : View

Products Affected

bitwiseshiftleft

  • stanford_javascript_crypto_library
CWE
CWE-347

Improper Verification of Cryptographic Signature

CWE-325

Missing Cryptographic Step