{"id":"CVE-2020-6829","title":"When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation","summary":"When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature gener…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","vendor":"mozilla","product":"firefox","affected":["firefox < 80.0","firefox_mobile < 80.0"],"patched":["firefox 80.0","firefox_mobile 80.0"],"published":"2020-10-28","updated":"2026-08-19","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-6829","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1631583","label":"security@mozilla.org"},{"url":"https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html","label":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-36/","label":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-39/","label":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1631583","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-36/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-39/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01467,"epssPercentile":0.72564,"ingestedAt":"2026-08-19T15:41:14.743Z","slug":"CVE-2020-6829","body":"## Overview\n\nWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.\n\n## Affected\n\n- `firefox < 80.0`\n- `firefox_mobile < 80.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `firefox 80.0`\n- `firefox_mobile 80.0`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}