ZeroHour

CVE-2025-54764

PoC
CVSS 3.1
6.2 medium
EPSS
<1%p11
Published
()
Modified
Description

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Vendors
arm
Products
mbed tls
Weakness
CWE-208
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.