CVE-2024-23680

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.

Affected Software (2)

VendorProductVersion
— — 2.0.0 < 2.2.0
— — 0 < 1.9.0

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%
Raw Score 0.002100
Percentile 11.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00210
2026-11-12
0.00210
2026-11-10
0.00210
2026-11-09
0.00210
2026-11-08
0.00210

Intelligence Sources

mitre ref →