Lucene search
+L

7 matches found

osv_jlsec
osv_jlsec
•added 2026/05/07 4:17 p.m.•28 views

JLSEC-2026-463 Mbed TLS timing side channel in RSA and CBC/ECB decryption

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...

5.1CVSS5.8AI score0.0027EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/07 12:00 a.m.•11 views

PT-2026-41578

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...

5.1CVSS5.8AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/04/02 5:58 a.m.•21 views

CVE-2025-66442

A flaw was found in Mbed TLS and TF-PSA-Crypto. This vulnerability is a compiler-induced timing side channel that occurs when the LLVM compiler's select-optimize feature is enabled. A remote attacker could potentially exploit this timing difference during RSA and CBC/ECB decryption operations to...

5.9CVSS6AI score0.0027EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/04/01 9:30 p.m.•26 views

EUVD-2025-209171

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...

5.1CVSS5.8AI score0.0027EPSS
SaveExploits0References5
Mend
Mend
•added 2026/04/01 12:00 a.m.•5 views

CVE-2025-66442

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...

5.9CVSS5.8AI score0.0027EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•2 views

CVE-2025-66442: Covert Timing Channel

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...

5.1CVSS5.8AI score0.0027EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2014/12/01 12:00 a.m.•60 views

KDE Konversation / Quassel IRC memory corruption

Memory corruption on ECB decryption...

5CVSS3.4AI score0.0355EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder