Assertion Failure in ECDSA Signature Verification in PuTTY by Simon Tatham

CVE-2026-48852

What is CVE-2026-48852?

An assertion failure in ECDSA signature verification in PuTTY versions before 0.84 poses potential security implications, as attackers could exploit this flaw to disrupt normal operations of the application. Proper handling of these signature verifications is crucial to maintaining the integrity and reliability of secure connections. Users of the affected versions are advised to update to the latest version promptly to mitigate any risks associated with this vulnerability.

References