CVE-2023-33242

CRITICAL

Crypto wallets - Info Disclosure

Title source: llm

Description

Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt (256 in total) because of not adhering to the paper's security proof's assumption regarding handling aborts after a failed signature.

Exploits (1)

nomisec WORKING POC 4 stars
by d0rb · poc
https://github.com/d0rb/CVE-2023-33242

References (4)

Scores

CVSS v3 9.6
EPSS 0.0474
EPSS Percentile 89.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Details

CWE
CWE-74
Status published
Products (1)
lindell17_project/lindell17
Published Aug 09, 2023
Tracked Since Feb 18, 2026