VDB
CVE-2025-14505
CVE-2025-14505
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Elliptic Uses a Cryptographic Primitive with a Risky Implementation
EPSS 0.18% · 7.5th percentile
Risk Scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.18%
7.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | elliptic | 0 |
| GCP | compute | |
| Oracle Cloud | compute | |
| N/A | Elliptic | <=6.6.1 |
Timeline
- Jan 8, 2026 CVE Published
- Jan 9, 2026 CVE Updated
- Jan 9, 2026 EPSS Score
- Jan 13, 2026 EPSS Score
- Jan 16, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 23, 2026 EPSS Score
- Jan 27, 2026 EPSS Score
- Jan 30, 2026 EPSS Score
- Feb 3, 2026 EPSS Score
- Feb 6, 2026 EPSS Score
- Feb 10, 2026 EPSS Score
References
- https://github.com/indutny/elliptic/issues/321 discussion
- https://www.herodevs.com/vulnerability-directory/cve-2025-14505 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-14505 advisory
- https://www.ibm.com/support/pages/node/7279972 advisory
- https://www.ibm.com/support/pages/node/7280010 advisory
- https://www.ibm.com/support/pages/node/7279458 advisory
- https://www.ibm.com/support/pages/node/7280089 advisory
- https://www.ibm.com/support/pages/node/7280183 advisory
- https://www.ibm.com/support/pages/node/7280131 advisory
- https://www.ibm.com/support/pages/node/7279924 advisory
- https://www.ibm.com/support/pages/node/7280105 advisory
- https://www.ibm.com/support/pages/node/7279466 advisory
- https://www.ibm.com/support/pages/node/7280009 advisory
- https://www.ibm.com/support/pages/node/7279973 advisory
- https://www.ibm.com/support/pages/node/7279901 advisory
- https://github.com/indutny/elliptic package