CVE-2026-48852

Description

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

References

• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
• https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html