CVE-2025-8556 – CIRCL FourQ Elliptic Curve Diffie-Hellman Key Exchange Session Compromise

CVE ID : CVE-2025-8556

Published : Aug. 6, 2025, 9:15 a.m. | 29 minutes ago

Description : A flaw was found in CIRCL’s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…