Lucene search

K
osvGoogleOSV:CVE-2020-12401
HistoryOct 08, 2020 - 2:15 p.m.

CVE-2020-12401

2020-10-0814:15:11
Google
osv.dev
12

EPSS

0.001

Percentile

17.0%

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.