CVE-2026-87737

OCaml / mirage-crypto-ec PUBLISHED

Description (CNA)

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

Affected (CNA)

Vendor / product	Versions
OCaml / mirage-crypto-ec	affected 0 before 2.4.0

CWE

CWE-208

References

https://osv.dev/vulnerability/OSEC-2026-17

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.