wolfSSL's ECCSI signature verifier wc_VerifyEccsiHash decodes the r and s scalars from the signature blob via mp_read_unsigned_bin with no check that they lie in [1, q-1]. A crafted forged signature could verify against any message for any identity, using only publicly-known constants.
{
"sources": [
{
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-5466",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5466",
"modified": "2026-06-17T10:59:04.683Z",
"id": "CVE-2026-5466",
"imported": "2026-07-17T22:31:30.836Z",
"published": "2026-04-10T04:17:16.420Z",
"database_specific": {
"status": "Analyzed"
}
},
{
"url": "https://api.github.com/advisories/GHSA-47qf-hp3h-rwmm",
"html_url": "https://github.com/advisories/GHSA-47qf-hp3h-rwmm",
"id": "GHSA-47qf-hp3h-rwmm",
"imported": "2026-07-17T22:31:31Z",
"published": "2026-04-10T06:31:37Z",
"modified": "2026-04-29T15:31:38Z"
},
{
"html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21291",
"published": "2026-04-10T03:00:42Z",
"url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-21291",
"imported": "2026-07-17T22:31:40.918Z",
"id": "EUVD-2026-21291",
"modified": "2026-04-22T03:55:48Z"
}
],
"license": "CC-BY-4.0"
}