PT-2025-48502 · Julia · Mbedtls Jll

Publicado 2025-11-21 · Atualizado 2025-11-21

OSV

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed.

Identificadores relacionados

JLSEC-2025-204

Produtos afetados

Mbedtls Jll

Referências · 6

• https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7 · Nota
• https://github.com/ARMmbed/mbedtls/issues/3394 · Nota
• https://bugs.gentoo.org/730752 · Nota
• https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html · Nota
• https://osv.dev/vulnerability/JLSEC-2025-204 · Aviso do Fabricante