vulnerability

Alpine Linux: CVE-2020-12400: Observable Discrepancy

Severity
1
CVSS
(AV:L/AC:H/Au:N/C:P/I:N/A:N)
Published
Oct 8, 2020
Added
Aug 22, 2024
Modified
Dec 5, 2025

Description

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

Solutions

alpine-linux-upgrade-nssalpine-linux-upgrade-firefoxalpine-linux-upgrade-librewolf
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.