cve.bz

CVE-2021-3114

6.5 mediumEPSS 2.7%

Medium (6.5). EPSS 2.7% chance of exploitation in the next 30 days. Fixed in stdlib 1.14.14, 1.15.7.

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE
CWE-682
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GO-2021-0235Gostdlib<1.14.14
>=1.15.0-0 <1.15.7		1.14.14, 1.15.7

References

Check your stackJSON