Description
The Elliptic prior to 6.6.0 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve’s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected.
Recommendation
Update the elliptic package to the latest compatible version. Followings are version details:
- Affected version(s): < 6.6.0
- Patched version(s): 6.6.0
References
Could your website be exposed too?
SmartScanner can check your website for Valid ECDSA signatures erroneously rejected in Elliptic and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Elliptic's ECDSA missing check for whether leading bit of r and s is zero - CVE-2024-42460
- Elliptic allows BER-encoded signatures - CVE-2024-42461
- Elliptic's verify function omits uniqueness validation - CVE-2024-48949
- Elliptic's EDDSA missing signature length check - CVE-2024-42459
You might also like:
See something that needs correcting? Let us knowUpdated November 27, 2025