vulnerability

Huawei EulerOS: CVE-2020-12400: nss security update

Severity
1
CVSS
(AV:L/AC:H/Au:N/C:P/I:N/A:N)
Published
Oct 8, 2020
Added
Dec 1, 2020
Modified
Aug 13, 2025

Description

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

Solutions

huawei-euleros-2_0_sp9-upgrade-nsshuawei-euleros-2_0_sp9-upgrade-nss-softoknhuawei-euleros-2_0_sp9-upgrade-nss-util
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.