What’s Vulnerable › Vulnerabilities

CVE-2024-48948: Valid ECDSA signatures erroneously rejected in Elliptic

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-10-15 · updated 2026-06-17
• Weakness: CWE-347

Description

The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.

Affected products

• Elliptic: 6.5.7
• Npm Elliptic: before 6.6.0 — fixed in 6.6.0

How to fix

Upgrade to a fixed version: Npm Elliptic 6.6.0. Check the vendor advisory for mitigations.

References

• https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/
• https://github.com/indutny/elliptic/issues/321
• https://github.com/indutny/elliptic/pull/322
• https://security.netapp.com/advisory/ntap-20241220-0004/

Get alerted when CVE-2024-48948 or the next vulnerability affects your stack