WRITEUP

WRITEUP
Exploit for CVE-2025-69277 - libsodium <ad3004e - Memory Corruption
AI Analysis

This patch addresses a vulnerability in libsodium's Ed25519 point validation by adding an additional check for Y==Z when X==0, preventing invalid points from being accepted. The fix includes both the core logic change and corresponding test cases.

Attack Type
other
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
T1190 - Exploit Public-Facing Application
Loading exploit code...
Download ZIP Password: eip
Authors
Frank DENIS
Vulnerability
CVE-2025-69277
libsodium <ad3004e - Memory Corruption
MEDIUM
CVSS 4.5