Junglewise Threat Intelligence

CVE-2025-29780: Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

CVE-2025-29780 · Severity: medium · CVSS 4 · Published 2025-03-14

Technologies: postquantum-feldman-vss (PyPI). Vendors: PyPI.

Executive brief

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

Affected products

PyPI postquantum-feldman-vss

Related threats

PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`