CVE-2019-25003

Name of the Vulnerable Software and Affected Versions libsecp256k1 versions prior to 0.3.1

Description The issue allows attackers to obtain sensitive information through a timing side-channel attack because Scalar::check overflow does not execute in constant time. This enables an attacker to potentially leak information via a timing attack.

Recommendations For versions prior to 0.3.1, update to version 0.3.1 or later to ensure Scalar::check overflow executes in constant time, preventing timing side-channel attacks. As a temporary workaround, consider modifying Scalar::check overflow to execute in constant time until a patch is available.