The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Go | Golang | * | 1.17.9 (excluding) |
Go | Golang | 1.18.0 (including) | 1.18.1 (excluding) |