CVE-2020-11735

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-25 · updated 2026-06-17
Weakness: CWE-203

Description

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."

Affected products

wolfSSL: before 4.4.0 — fixed in 4.4.0

How to fix

Upgrade to a fixed version: wolfSSL 4.4.0. Check the vendor advisory for mitigations.

References

https://github.com/wolfSSL/wolfssl/commit/1de07da61f0c8e9926dcbd68119f73230dae283f
https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stable
https://github.com/wolfSSL/wolfssl/commit/1de07da61f0c8e9926dcbd68119f73230dae283f
https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stable

Get alerted when CVE-2020-11735 or the next vulnerability affects your stack