buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2026-48852
Component Overview
Vulnerability Overview
Name
CVE-2026-48852
Source
NVD (
link
)
Debian (
link
)
Description
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
CWEs
CWE-617
Published Date
May 25, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html
Patch
Analysis
#
Affected Component
Analysis
putty
Patched
Vulnerability Ratings
#
3.7
CVSSv31
NaN
other
Others affected component
#
Name
Project
Project Version
Version
Status
putty
buildroot
master
0.84
Not Affected
Resolved with patches
#
putty (buildroot:2025.02.x)
#
Title
Author
Resolve
1
Remove bogus assertion in ecc_weierstrass_add.
Simon Tatham <anakin@pobox.com>
CVE-2026-48852