by Kastro
Paper/Archive/CVE-2025-64767

CVE-2025-64767

dajiaji hpke-js — hpke-js reuses AEAD nonces

EPSS 0.2%public exploitCVSS 9.1
critical.is priorityof 100
40
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 13.6.136 × 202.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.

Affected

ProductAffectedFixed inSource
hpke-js< 1.7.5–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refgithub.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4refgithub.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aafrefgithub.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34