In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.
Published December 25, 2019.
Wolfssl Wolfssl