CVE-2026-63410 | sgbett secp256k1-native up to 0.17.x Montgomery ladder extconf.rb Point#mul/scalar_multiply_ct timing discrepancy

October 31, 2026 Yanac

A vulnerability identified as problematic has been detected in sgbett secp256k1-native up to 0.17.x. Impacted is the function Point#mul/scalar_multiply_ct of the file extconf.rb of the component Montgomery ladder. This manipulation causes observable timing discrepancy.

This vulnerability is registered as CVE-2026-63410. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More