CVE-2024-21502

CVE-2024-21502 is a Use of Uninitialized Variable vulnerability in the fastecdsa package versions prior to 2.3.2. This flaw, located in the curvemath_mul function, allows an attacker to manipulate uninitialized stack variables, potentially leading to arbitrary free(), realloc(), or null pointer dereferences. With a CVSS score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity and can result in denial of service and possible heap exploitation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.