CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2019-14853
High (7.5) in python-ecdsa project python-ecdsa. EPSS 2.4% chance of exploitation in the next 30 days. Fixed in ecdsa 0.13.3.
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
Severity
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-755, CWE-391
- Published
- Modified
- Record from
- the NVD, synced
Affected
- python-ecdsa_project:python-ecdsa
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pwfw-mgfj-7g3g | PyPI | ecdsa | <0.13.3 | 0.13.3 |
| PYSEC-2019-177 | PyPI | ecdsa | <0.13.3 | 0.13.3 |