2.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-1229

CVE-2026-1229: CIRCL has an incorrect calculation in secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected.

The bug was fixed in v1.6.3.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-1229

CVE-2026-1229:

2.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/cloudflare/circl	go	< 1.6.3	1.6.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in an incorrect calculation within the CombinedMult function for the secp384r1 curve, caused by a flaw in the underlying elliptic curve point addition logic. The analysis of the commits reveals that the primary vulnerable function is (*jacobianPoint).add in ecc/p384/point.go. This function did not correctly handle the special case of adding a point to itself (point doubling), leading to incorrect results. The patch addresses this by explicitly detecting this condition and calling the correct double() function. Furthermore, the (curve).scalarMultOmega function in ecc/p384/p384opt.go, which is a dependency of CombinedMult, was refactored to use completeAdd formulas. This change makes the scalar multiplication logic more robust and avoids the vulnerable add function, thus mitigating the vulnerability at a higher level as well.

Vulnerable functions

(*jacobianPoint).add

ecc/p384/point.go

The `add` function for a `jacobianPoint` was vulnerable because it did not correctly handle the case where the two points being added are the same (point doubling). This resulted in an incorrect calculation. The patch adds a specific check to detect this case and call the `double()` function instead.

(curve).scalarMultOmega

ecc/p384/p384opt.go

This function was part of the vulnerable execution path. It was modified as part of the fix to use `completeAdd` instead of the vulnerable `add` function. The original implementation would call the faulty `add` function, leading to the incorrect calculation.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.