CVE-2025-8556

CVE-2025-8556 describes a low-severity flaw in CIRCL's FourQ elliptic curve implementation, allowing attackers to compromise session security through low-order point injection and incorrect point validation during Diffie-Hellman key exchange. The vulnerability has a CVSS score of 3.7 (LOW), indicating network access with high attack complexity and a potential impact of limited confidentiality. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable. Despite its low severity, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.