CVE-2025-8556— Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

CVSS 3.7 · Low EPSS 0.03% · P9 Updated Feb 26, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-8556

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

Source: NVD (National Vulnerability Database)

Vulnerability Description

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: NVD (National Vulnerability Database)

Vulnerability Type

CWE-1287

Source: NVD (National Vulnerability Database)

Vulnerability Title

CIRCL 数据伪造问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

CIRCL是Cloudflare开源的一个用 Go 编写的加密原语集合。 CIRCL存在数据伪造问题漏洞，该漏洞源于低阶点注入和点验证不当，可能破坏会话安全。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Multicluster Global Hub	-	`cpe:/a:redhat:multicluster_globalhub`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Ceph Storage 5	-	`cpe:/a:redhat:ceph_storage:5`
Red Hat	Red Hat Ceph Storage 5	-	`cpe:/a:redhat:ceph_storage:5`
Red Hat	Red Hat Ceph Storage 6	-	`cpe:/a:redhat:ceph_storage:6`
Red Hat	Red Hat Ceph Storage 6	-	`cpe:/a:redhat:ceph_storage:6`
Red Hat	Red Hat Ceph Storage 8	-	`cpe:/a:redhat:ceph_storage:8`
Red Hat	Red Hat Ceph Storage 8	-	`cpe:/a:redhat:ceph_storage:8`
Red Hat	Red Hat Developer Hub	-	`cpe:/a:redhat:rhdh:1`
Red Hat	Red Hat Developer Hub	-	`cpe:/a:redhat:rhdh:1`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/o:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/o:redhat:enterprise_linux:9`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat OpenShift AI (RHOAI)	-	`cpe:/a:redhat:openshift_ai`
Red Hat	Red Hat OpenShift AI (RHOAI)	-	`cpe:/a:redhat:openshift_ai`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift for Windows Containers	-	`cpe:/a:redhat:windows_machine_config`
Red Hat	Red Hat OpenShift for Windows Containers	-	`cpe:/a:redhat:windows_machine_config`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift Virtualization 4	-	`cpe:/a:redhat:container_native_virtualization:4`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat Trusted Application Pipeline	-	`cpe:/a:redhat:trusted_application_pipeline:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Profile Analyzer	-	`cpe:/a:redhat:trusted_profile_analyzer:1`

II. Public POCs for CVE-2025-8556

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2025-8556

请登录查看更多情报信息。

CVE-2025-8556 - Red Hat Customer Portalvdb-entryx_refsource_REDHAT
2371624 – (CVE-2025-8556, GHSA-2x5j-vhc8-9cwm) CVE-2025-8556 github.com/cloudflare/circl: CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsissue-trackingx_refsource_REDHAT
https://nvd.nist.gov/vuln/detail/CVE-2025-8556

IV. Related Vulnerabilities

Same weakness: CWE-1287

V. Comments for CVE-2025-8556

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-8556— Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

I. Basic Information for CVE-2025-8556

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2025-8556

III. Intelligence Information for CVE-2025-8556

IV. Related Vulnerabilities

V. Comments for CVE-2025-8556

Leave a comment