CVE-2024-49364: 
JavaScript vulnerability analysis and mitigation

tiny-secp256k1, a tiny secp256k1 native/JS wrapper, was found to contain a critical vulnerability (CVE-2024-49364) prior to version 1.1.7. The vulnerability was discovered where a private key could be extracted when signing a malicious JSON-stringifiable object, specifically in environments where the global Buffer is the buffer package (GitHub Advisory).

The vulnerability stems from a bypass of the Buffer.isBuffer check, which results in k reuse for different messages. This leads to private key extraction through a single invalid message, along with a second message/signature pair that could be from any previously known valid signature. The issue specifically affects environments where require('buffer') points to the NPM buffer package, such as browser bundles and React Native apps (GitHub Advisory).

The vulnerability allows for full private key extraction when signing a single malicious message that can pass JSON.stringify/JSON.parse and potentially come from the network. This is particularly severe as signing a single message should not leak the private key, even in cases where the message is attacker-controlled (GitHub Advisory).

The vulnerability has been patched in version 1.1.7 of tiny-secp256k1. Users should upgrade to this version or later. Version 2.x is unaffected as it verifies input to be an actual Uint8Array instance (GitHub Advisory, GitHub Pull).