PT-2025-48508

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtls mpi exp mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

PT-2025-48519

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls mpi exp mod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking ...

PT-2025-48517

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses typically, an untrusted operating system attacking a secure enclave can recover an RSA private key after observing the victim performing a single...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the mbedtlsmpimodinv or mbedtlsmpigcd functions. An attacker can recover sensitive information from RSA operations by performing a local timing analysis. Note: Applications that do not use RSA private keys and do not...

Mbed TLS mbedtls_mpi_exp_mod Disclosure

The vulnerability of the mbedtlsmpiexpmod function in the Mbed TLS software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to disclose the protected information...

mbedtls_mpi_exp_mod TLS DoS

The vulnerability of the mbedtlsmpiexpmod function in TLS and SSL protocol implementations is related to the lack of data size limitations during calculations. Exploiting this vulnerability allows a remote attacker to cause service failures...

PT-2020-22815

Name of the Vulnerable Software and Affected Versions mbedTLS affected versions not specified Description The issue concerns several security-related problems. One problem is related to the size of calculations performed by mbedtls mpi exp mod, which could lead to a potential denial of service wh...

PT-2020-6618 · Mbed Tls +2 · Mbed Tls +2

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 2.25.0 Mbed TLS versions prior to 2.16.9 LTS Mbed TLS versions prior to 2.7.18 LTS Description: The issue is related to the mbedtls mpi exp mod function in Mbed TLS, which lacks a limit on the size of data during...