PT-2026-1743 · Elliptic+1 · Elliptic+1

Daniel Bleichenbacher + 2 · Published 2026-01-08 · Updated 2026-01-09 · CVE-2025-14505

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Elliptic versions prior to 6.6.2

Description The ECDSA implementation within the Elliptic package produces incorrect signatures when an interim value of k (calculated according to step 3.2 of RFC 6979) contains leading zeros, making it susceptible to cryptanalysis and potentially exposing the secret key. This occurs because the byte-length of k is calculated incorrectly, leading to truncation during computation. This can disrupt legitimate transactions or communications. An attacker, under specific conditions, could derive the secret key by obtaining both a faulty signature generated by a vulnerable version of Elliptic and a correct signature for the same inputs.

Recommendations Update to Elliptic version 6.6.2 or later.

Exploit

Fix

Weakness Enumeration

CWE-1240

Related Identifiers

CVE-2025-14505

GHSA-848J-6MX2-7J84

Affected Products

Debian

Elliptic

References · 13

• 🔥 https://github.com/indutny/elliptic/issues/321 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14505 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-848j-6mx2-7j84 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14505 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14505 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14505 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-14505 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14505 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14505 · Vendor Advisory
• https://github.com/indutny/elliptic · Note
• https://t.me/CVEtracker/41767 · Telegram Post
• https://twitter.com/CVEnew/status/2009462332297236795 · Twitter Post
• https://herodevs.com/vulnerability-directory/cve-2025-14505 · Note