CVE-2020-11713

HIGH

wolfSSL 4.3.0 - Timing Side-Channel Attack in ECC Mulmod Operation

Title source: llm

wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.

Core 2

Core References

Patch, Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0196

EPSS Percentile 77.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-203

Status published

Products (1)

wolfssl/wolfssl 4.3.0

Published Apr 12, 2020

Tracked Since Feb 18, 2026