Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Firefox, Firefox for Android 80 Clear all filters
TI-2020-09919 CVE-2020-12401 · GHSA-cm2q-67xf-jw8c

Observable discrepancy in Mozilla Firefox

Priority LOW 22

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00326 Published 2020-10-08 Partial fix · 80 CWE-203
TI-2020-09918 CVE-2020-12400 · GHSA-38vr-4p57-8h9g

Observable discrepancy in Mozilla Firefox

Priority LOW 21

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0027 Published 2020-10-08 Partial fix · 80 CWE-203