Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

coinbase/cb-mpc

              master @ a34e9e8
            

Fixes

CVEs

HIGH

Peak severity

54.5%

Coverage

Highlights

Crypto Misuse: 3 prior fixes. Scrutinize any change in this area.

src/cbmpc/core/buf.cpp: most-fixed (3 issues). Treat as high-risk during review.

15 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Implementation Flaw: Two distinct fixes address degenerate inputs (equal-point doubling, infinity) in secp256k1 point addition, indicating a fragile core that can corrupt protocol computations when fed malicious points.

Buffer Overflow: Two buffer overflow fixes in the core buffer type—one in modular arithmetic bounds, one in deserialization—show that size checks are frequently missing before unsafe memory operations.

Use-After-Free: Use-after-free defects appear both in the core buffer assignment operators and at the CGO network boundary, indicating aliasing and lifetime management are error-prone across the C/C++ and Go boundary.