What’s Vulnerable › Vulnerabilities
CVE-2022-44310
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-02-24 · updated 2026-06-17
- Weakness: CWE-668
Description
In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.
Affected products
- Ecdh Project Ecdh: before 0.2.0 — fixed in 0.2.0
How to fix
Upgrade to a fixed version: Ecdh Project Ecdh 0.2.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-44310 or the next vulnerability affects your stack