PT-2025-48503 · Julia · Mbedtls Jll

Publicado 2025-11-21 · Atualizado 2025-11-21

OSV

An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls ecp check pub priv, mbedtls pk parse key, mbedtls pk parse keyfile, mbedtls ecp mul, and mbedtls ecp mul restartable.

Identificadores relacionados

JLSEC-2025-205

Produtos afetados

Mbedtls Jll

Referências · 5

• https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-205 · Aviso do Fabricante
• https://bugs.gentoo.org/730752 · Nota
• https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html · Nota