packages:
  - module: std
    package: crypto/elliptic
    symbols:
      - p224Contract
    versions:
      - fixed: 1.14.14
      - introduced: 1.15.0
        fixed: 1.15.7
description: |
    The P224() Curve implementation can in rare circumstances generate
    incorrect outputs, including returning invalid points from
    ScalarMult.
published: 2022-02-17T17:34:14Z
cves:
  - CVE-2021-3114
credit: |
    the elliptic-curve-differential-fuzzer project running on OSS-Fuzz
    and reported by Philippe Antoine (Catena cyber)
links:
    pr: https://go.dev/cl/284779
    commit: https://go.googlesource.com/go/+/d95ca9138026cbe40e0857d76a81a16d03230871
    context:
      - https://go.dev/issue/43786
      - https://groups.google.com/g/golang-announce/c/mperVMGa98w