PT-2025-42819 · Mbed Tls+1 · Mbed Tls+1
CVE-2025-54764
·
Published
2025-10-20
·
Updated
2026-06-22
CVSS v3.1
6.2
Medium
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Mbed TLS versions prior to 3.6.5
Description
The software contains a flaw that could allow a local attacker to conduct a timing attack against specific RSA operations. Additionally, direct calls to the
mbedtls mpi mod inv and mbedtls mpi gcd functions are susceptible to exploitation.Recommendations
Update to version 3.6.5 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Mbed Tls