{"id":"CVE-2026-73567","sourceIdentifier":"security-advisories@github.com","published":"2026-08-13T18:18:19.387","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by jsbn@1.1.0, which seeds an ARC4 stream from Math.random() and new Date().getTime() because window.crypto.getRandomValues is unavailable even though globalThis.crypto exists. An attacker who can observe the process's Math.random() outputs and estimate the key-generation time can reconstruct the seed, recover generated SM2 private keys, and predict signing ephemeral scalars used to forge signatures. This issue is fixed in version 0.5.0."},{"lang":"es","value":"sm-crypto proporciona implementaciones de JavaScript de los algoritmos criptográficos chinos SM2, SM3 y SM4. Antes de la versión 0.5.0, la ruta predeterminada sin argumentos de sm2.generateKeyPairHex() en Node.js utiliza la instancia SecureRandom de ámbito de módulo en src/sm2/utils.js, proporcionada por jsbn@1.1.0, que inicializa un flujo ARC4 a partir de Math.random() y new Date().getTime() porque window.crypto.getRandomValues no está disponible aunque globalThis.crypto exista. Un atacante que puede observar las salidas de Math.random() del proceso y estimar el tiempo de generación de claves puede reconstruir la semilla, recuperar las claves privadas SM2 generadas y predecir los escalares efímeros de firma utilizados para falsificar firmas. Este problema está solucionado en la versión 0.5.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"JuneAndGreen","product":"sm-crypto","versions":[{"version":"< 0.5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-14T17:55:19.387144Z","id":"CVE-2026-73567","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"references":[{"url":"https://github.com/JuneAndGreen/sm-crypto/commit/1f9bd7bd160c24efd9c26c8f7fda997c68c823d0","source":"security-advisories@github.com"},{"url":"https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848","source":"security-advisories@github.com"}]}