description: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56.
problem types: WebCrypto allows AES-GCM with 0-length IV
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 56, status: affected, version: unspecified, versionType: custom
}