VU#701544: mpc-lib hardened derivation fails to protect ancestor isolation

2026-10-27T20:52:01Z•72844b45e7996450d209a257747d72933cb71de4076d2033524acb5abc8847bd
CVE-2026-100156CVE-2026-109618CVE-2026-109619CVE-2026-34073CVE-2026-3547CVE-2026-3833CVE-2026-90975CVE-2026-91141CVE-2026-96679CVE-2026-96681CVE-2026-97406BIP32CERT/CCIDORLLM-platformsMPCPHPTLSX.509authentication-bypassautomotivecommand-injectioncredential-theftcryptographydenial-of-servicememory-corruptionname-constraintsprivilege-escalationremote-code-executionuse-after-freevsomeipvulnerability

What happened

CERT/CC advisories describe multiple vulnerabilities across cryptographic libraries, automotive middleware, PHP, AI platforms, TLS validation libraries, and management agents. Impacts include remote code execution, authentication bypass, persistent credential creation, denial of service, unauthorized data access, and compromise of MPC key hierarchy shares. Several entries include CVE identifiers and affected-version guidance, but the feed contains multiple distinct issues with varying exploitability and remediation status.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
certcc_vulnotes
Record identifier
72844b45e7996450d209a257747d72933cb71de4076d2033524acb5abc8847bd
Enrichment time
2026-10-27T20:52:01Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · VU#701544: mpc-lib hardened derivation fails to protect ancestor isolation · Baitaphish