CVE-2019-25003: Parity LIBSECP256K1

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.

Affected products

• Parity LIBSECP256K1: before 0.3.1 (fixed in 0.3.1)

Published 2020-12-31. Last modified 2026-06-17.