PT-2025-48519

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls mpi exp mod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking ...

PT-2025-48508

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtls mpi exp mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

Vulnerability of the mbedtls_mpi_exp_mod() function in Mbed TLS software, which allows a perpetrator to disclose protected information

The vulnerability of the mbedtlsmpiexpmod function in the Mbed TLS software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the mbedtls_mpi_exp_mod function in implementations of TLS and SSL protocols allows a attacker to cause a service failure.

The vulnerability of the mbedtlsmpiexpmod function in TLS and SSL protocol implementations is related to the lack of data size limitations during calculations. Exploiting this vulnerability allows a remote attacker to cause service failures...

PT-2020-22815

Name of the Vulnerable Software and Affected Versions mbedTLS affected versions not specified Description The issue concerns several security-related problems. One problem is related to the size of calculations performed by mbedtls mpi exp mod, which could lead to a potential denial of service wh...