CVE-2025-66017: cggmp21 Package Vulnerability Leading to Reduced Security in Presignatures
Summary
CVE-2025-66017: CGGMP21 presignatures can be used in the way that significantly reduces security. Affects cggmp21 versions >= 0.0.0-0. No fix is published. How to fix ↓
Also tracked for
- cggmp24 · crates.io
The same CVE-2025-66017 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cggmp21 package is a cryptographic library designed for secure signing operations, particularly in the context of hierarchical deterministic (HD) wallets. It provides functionalities for generating signatures and managing presignatures, which are partial signatures that can be completed later. However, the package has a vulnerability that allows presignatures to be manipulated in ways that significantly compromise security.
Vulnerability Detail
The vulnerability arises from the use of presignatures in two specific contexts. First, when presignatures are combined with HD wallet derivation, the security level is reduced to 85 bits, making it susceptible to attacks. Second, the use of presignatures in 'raw signing' allows for signature forgery, as it permits the issuance of partial signatures without the original message being known. This malleability poses a serious risk to the integrity of the signing process.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If you cannot update to the patched version, avoid using presignatures in the vulnerable contexts. Specifically, do not use presignatures with HD wallet derivation paths or in raw signing scenarios where the original message is not provided.
Conclusion
The cggmp21 package has a critical vulnerability related to the use of presignatures that can significantly reduce security and enable signature forgery. It is essential to update to the latest patched version to ensure the integrity and security of cryptographic operations.
See every vulnerability recorded for cggmp21 →
FAQ
A presignature is a partial signature that can be completed later, allowing for flexibility in cryptographic signing processes.
The vulnerability reduces the security level of HD wallets using presignatures to 85 bits, making them more vulnerable to attacks.
Signature forgery can lead to unauthorized transactions and compromise the integrity of signed data, posing significant security risks.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without any signup.
If you cannot update to the patched version, avoid using presignatures in the vulnerable contexts to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for cggmp21.
