Skip to content
Sign in
Not rated

CVE-2020-12400 When converting coordinates from projective to affine, the modular inversion was not performed in constant time,…

Description

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

Affected products and versions

Product Affected versions Fixed in
Firefox 80 earliest → < 80 80
Firefox for Android 80 earliest → < 80 80

Other CVEs of Firefox

The 2221 CVEs of Firefox →
CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 8.8 High CVE-2026-118027 Frame poisoning in the Layout component 9.1 Critical CVE-2026-118025 Other issue in the SVG component 8.8 High CVE-2026-118026 Invalid pointer in the JavaScript: GC component 8.8 High
Track this CVE