GHSA-p7qx-fg8r-mfq9

GHSA-p7qx-fg8r-mfq9 PUBLISHED

Record from GitHub Advisory Database · Published May 24, 2022

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.

Timeline

May 24, 2022 CVE Published
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-p7qx-fg8r-mfq9
vulnetix vdb fixes GHSA-p7qx-fg8r-mfq9

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-p7qx-fg8r-mfq9/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →