CVE WATCH / VULNERABILITY DETAIL
CVE-2026-54875
LOWCVSS 3.7NVD feed
Published 29 September 2026 · tracked since 30 September 2026
Description
Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog