Skip to content
Sign in
5.9 Medium

CVE-2026-87737 An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml

Description

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

Affected products and versions

Product Affected versions Fixed in
mirage-crypto-ec 2.4 earliest → < 2.4.0 2.4.0

Other CVEs of mirage-crypto-ec

The 3 CVEs of mirage-crypto-ec →
CVE-2026-87736 An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml 4.3 Medium CVE-2026-87733 An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml 6.2 Medium
Track this CVE