PT-2025-48045 · Cggmp21+1 · Cggmp21+1
Published
2025-11-24
·
Updated
2025-12-01
·
CVE-2025-66017
CVSS v4.0
8.2
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
cggmp21 versions 0.6.3 and earlier
cggmp24 version 0.7.0-alpha.1
Description
The software is susceptible to a security issue related to the use of presignatures in specific contexts. Specifically, using presignatures in conjunction with HD wallet derivation or "raw signing" can significantly reduce security or lead to signature forgery. The
Presignature::set derivation path function was identified as a point of vulnerability, allowing malleable attacks that reduce the security level to 85 bits. Additionally, the Presignature::issue partial signature function could be exploited to forge signatures when signing a hash without knowing the original message. The API has been modified in a later release to prevent these insecure uses of presignatures.Recommendations
cggmp21 versions 0.6.3 and earlier: Migrate to a patched version that excludes presignatures from being used in vulnerable scenarios, or avoid using presignatures in contexts where they weaken system security.
cggmp24 version 0.7.0-alpha.1: Upgrade to version 0.7.0-alpha.2 or later, and follow the migration guidelines to ensure secure usage.
Exploit
Fix
Use of a Broken Cryptographic Algorithm
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cggmp21
Cggmp24