Panic due to large inputs affecting P-256 curves in crypto/elliptic

HIGH 7.5CVE-2022-28327 · BIT-golang-2022-28327 · GO-2022-0435 · Published 20/04/2022 · updated 17/06/2026

In short

CVE-2022-28327 is a HIGH (CVSS 7.5) vulnerability affecting stdlib, extra packages for enterprise linux (fedoraproject), go (golang).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 90.9% of all vulnerabilities.
Fix: update to 1.18.1, 1.17.9 or later.

Package	Affected versions	Patched versions
stdlib Go	`≥ 1.18.0-0, < 1.18.1< 1.17.9`	`1.18.11.17.9`
extra packages for enterprise linux fedoraproject	`= 7.0= 8.0`	No fix yet
go golang	`≥ 1.18.0, < 1.18.1< 1.17.9`	`1.18.11.17.9`

Description

A crafted scalar input longer than 32 bytes can cause P256().ScalarMult or P256().ScalarBaseMult to panic. Indirect uses through crypto/ecdsa and crypto/tls are unaffected. amd64, arm64, ppc64le, and s390x are unaffected.

NVD description

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

References

More vulnerabilities in stdlib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free