{"id":"EUVD-2025-199640","enisaUuid":"8238f0fd-911e-36d5-b2e3-446aa48a5faa","description":"CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used in the way that significantly reduces security. cggmp24 version 0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security.","datePublished":"Nov 25, 2025, 7:59:07 PM","dateUpdated":"Nov 25, 2025, 8:48:35 PM","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-8frv-q972-9rq5\nhttps://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained\n","aliases":"CVE-2025-66017\nGHSA-8frv-q972-9rq5\n","assigner":"GitHub_M","epss":0.22,"enisaIdProduct":[{"id":"cad3ec28-2c9d-3543-a866-08d0db5158dc","product":{"name":"cggmp21","vendor":{"name":"LFDT-Lockness"}},"product_version":"cggmp21 ≤ 0.6.3"},{"id":"d6444a49-d2c8-3fdd-9b17-9f8986ea7b2c","product":{"name":"cggmp21","vendor":{"name":"LFDT-Lockness"}},"product_version":"cggmp24 \u003d 0.7.0-alpha.1"}],"enisaIdVendor":[{"id":"df40f876-c958-311f-9c10-6c056b7d95b4","vendor":{"name":"LFDT-Lockness"}}],"enisaIdVulnerability":[{"id":"6b9decf5-c5dc-3077-9259-99fbccd8f103","vulnerability":{"id":"CVE-2025-66017","description":"CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used in the way that significantly reduces security. cggmp24 version 0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security.","datePublished":"Nov 25, 2025, 7:59:07 PM","dateUpdated":"Nov 25, 2025, 8:48:35 PM","status":"PUBLISHED","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-8frv-q972-9rq5\nhttps://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained\n","enisa_id":"EUVD-2025-199640\n","assigner":"GitHub_M","epss":0.22,"dataProcessed":"Oct 27, 2026, 7:20:58 AM","vulnerabilityProduct":[{"id":"608033af-d5ff-352b-b62b-cd06c21bfbd7","product":{"name":"cggmp21","vendor":{"name":"LFDT-Lockness"}},"product_version":"cggmp21 ≤ 0.6.3"},{"id":"d09a711a-75ee-3b31-b84b-c4edc8dd3741","product":{"name":"cggmp21","vendor":{"name":"LFDT-Lockness"}},"product_version":"cggmp24 \u003d 0.7.0-alpha.1"}],"vulnerabilityVendor":[{"id":"f47ab12d-c33b-3ee3-a797-58b2adab8906","vendor":{"name":"LFDT-Lockness"}}]}},{"id":"dc0e453c-a72e-3ccb-ba0f-1f16216d107b","vulnerability":{"id":"GHSA-8frv-q972-9rq5","description":"cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures","datePublished":"Nov 25, 2025, 8:42:28 PM","dateUpdated":"Nov 27, 2025, 9:00:00 AM","baseScore":0.0,"references":"https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-8frv-q972-9rq5\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66017\nhttps://github.com/LFDT-Lockness/cggmp21/commit/9d98157e151596573cb071da59d27a4e0ac9b8dc\nhttps://github.com/LFDT-Lockness/cggmp21\nhttps://rustsec.org/advisories/RUSTSEC-2025-0127.html\nhttps://rustsec.org/advisories/RUSTSEC-2025-0128.html\nhttps://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained\n","enisa_id":"EUVD-2025-199640\n","aliases":"CVE-2025-66017\nGHSA-8frv-q972-9rq5\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}