VU#701544: mpc-lib hardened derivation fails to protect ancestor isolation
2026-10-27T20:52:01Z•72844b45e7996450d209a257747d72933cb71de4076d2033524acb5abc8847bd
CVE-2026-100156CVE-2026-109618CVE-2026-109619CVE-2026-34073CVE-2026-3547CVE-2026-3833CVE-2026-90975CVE-2026-91141CVE-2026-96679CVE-2026-96681CVE-2026-97406BIP32CERT/CCIDORLLM-platformsMPCPHPTLSX.509authentication-bypassautomotivecommand-injectioncredential-theftcryptographydenial-of-servicememory-corruptionname-constraintsprivilege-escalationremote-code-executionuse-after-freevsomeipvulnerability
What happened
CERT/CC advisories describe multiple vulnerabilities across cryptographic libraries, automotive middleware, PHP, AI platforms, TLS validation libraries, and management agents. Impacts include remote code execution, authentication bypass, persistent credential creation, denial of service, unauthorized data access, and compromise of MPC key hierarchy shares. Several entries include CVE identifiers and affected-version guidance, but the feed contains multiple distinct issues with varying exploitability and remediation status.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certcc_vulnotes
- Record identifier
- 72844b45e7996450d209a257747d72933cb71de4076d2033524acb5abc8847bd
- Enrichment time
- 2026-10-27T20:52:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.