CVE-2025-8556 - CVE House

Status published Low CVE-2025-8556

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

3.7 CVSS

Vulnerability Description

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8556

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Unknown

View All →

CVE-2025-9978

Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS

Unknown 0

CVE-2025-9959

Sandbox escape in smolagents Local Python execution environment via dunder attributes

High 7.6

CVE-2025-9900

Libtiff: libtiff write-what-where

High 8.8

CVE-2025-9784

Undertow: undertow madeyoureset http/2 ddos vulnerability

High 7.5

CVE-2025-9710

Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

Unknown 0

Affected Vendor

Unknown

View all reports →

Affected Software

Builds for Red Hat OpenShift, Custom Metric Autoscaler operator for Red Hat Openshift, Multicluster Global Hub, OpenShift Pipelines, OpenShift Serverless, OpenShift Service Mesh 3, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Advanced Cluster Security 4, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Ceph Storage 8, Red Hat Developer Hub, Red Hat Edge Manager preview, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux AI (RHEL AI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat OpenShift Dev Workspaces Operator, Red Hat OpenShift for Windows Containers, Red Hat OpenShift GitOps, Red Hat OpenShift Virtualization 4, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1, Red Hat Trusted Application Pipeline, Red Hat Trusted Artifact Signer, Red Hat Trusted Profile Analyzer

Vulnerable Versions:

Timeline

Official Publish: August 6th, 2025

Last Modified: February 25th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-1287

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.