A critical cryptographic flaw in the GMSM library allows unauthenticated attackers to derive decryption keys and forge ciphertexts by exploiting improper handling of infinity points in SM9 decryption.

This is a cryptographic implementation flaw (CWE-347) where the SM9 decryption process fails to reject the point at infinity during ciphertext deserialization. This oversight allows an unauthenticated attacker to force the bilinear pairing result to a predictable constant, enabling the derivation of secret key material and the successful forgery of ciphertexts.

The ability to forge valid ciphertexts or derive decryption keys undermines the integrity and confidentiality of all communications secured by the affected GMSM library. Given the CVSS score of 7.5, this high-severity vulnerability presents a significant risk to organizations relying on SM9 for secure data exchange, potentially leading to unauthorized information disclosure or the injection of malicious, authenticated data into protected systems.

Immediate Action: Update the GMSM library to version 0.41.1 or later immediately to incorporate the required checks for the point at infinity.

Proactive Monitoring: Review application logs for unusual patterns in cryptographic operations or failed decryption attempts that may indicate attempts to probe the SM9 implementation.

Compensating Controls: If immediate patching is not feasible, restrict access to services utilizing the vulnerable SM9 implementation to trusted internal networks to reduce the exposure to external, unauthenticated attackers.

Public Exploit Available: Unknown.

This vulnerability represents a significant breakdown in the cryptographic security of the GMSM library. Organizations must prioritize updating the dependency to version 0.41.1 to close the vector that allows for ciphertext forgery. Failure to patch leaves systems exposed to potential data interception and manipulation attacks that are highly automatable.