| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 80.0 | 80.0 |
| firefox mobile | < 80.0 | 80.0 |
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free