CVE-2026-87736 PUBLISHED

Assigner: mitre
Reserved: 09.09.2026 Published: 09.09.2026 Updated: 09.09.2026

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 4.3

Product Status

Vendor OCaml
Product mirage-crypto-ec
Versions Default: unaffected
  • affected from 0 to 2.3.0 (excl.)

References

Problem Types

  • CWE-125 Out-of-bounds Read CWE