Vulnerability · Published Aug 9, 2023 · Assigned by Halborn
CVE-2023-33241GG18 / GG20 TSS Beta Parameter Vulnerability
Critical 9.6
In plain English
A critical-severity security flaw in Wallet from GG TSS Implementations. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)1.2%top 32.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GG TSS Implementations | Wallet | 1820 |