I think this is a problem with multivariate polynomials over finite
fields and is not specific to elliptic curves. The following code
produces a leak:
When constructing an elliptic curve its equation is constructed in the
3-variable polynomial ring over K, and thus we will get this leak.