ASA-2019-00440 – Mozilla Firefox: Out-of-bounds read when importing curve25519 private key

When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure.