CVE-2026-87737: Medium severity ocaml/mirage-crypto-ec vulnerability
An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this timing side channel?
Deployments using the mirage-crypto-ec package before version 2.4.0 are affected when they perform NIST elliptic-curve scalar multiplication.
What must an attacker be able to do to exploit the issue?
The attacker must be able to observe timing differences associated with lookups during NIST elliptic-curve scalar multiplication. The CVSS vector indicates network attackability, no privileges, and no user interaction, but also high attack complexity.
What is the impact if exploitation succeeds?
The timing behavior can reveal information dependent on a secret. The provided severity data rates confidentiality impact as high, with no integrity or availability impact.
How can I determine whether remediation is needed?
Check whether your OCaml application depends on mirage-crypto-ec and whether the resolved package version is earlier than 2.4.0. Also determine whether the application uses NIST elliptic-curve scalar multiplication.