PT-2025-30103 · Wolfssl+1 · Wolfssl+1

Allan Delautre + 2 · Published 2025-07-18 · Updated 2026-01-21 · CVE-2025-7396

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Medium

Base vector

AV:P/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions wolfSSL version 5.8.2

Description In wolfSSL release 5.8.2, blinding support is enabled by default for Curve25519 in applicable builds. This feature provides an additional layer of protection against side-channel attacks aimed at extracting a private key, particularly for devices susceptible to physical access or observation. The blinding configure option applies only to the base C implementation of Curve25519 and is not available with ARM assembly builds, Intel assembly builds, or the small Curve25519 feature.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-385

Related Identifiers

CVE-2025-7396

Affected Products

Debian

Wolfssl

References · 13

• https://ubuntu.com/security/CVE-2025-7396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7396 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-7396 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-7396 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-7396 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-7396 · Vendor Advisory
• https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#wolfssl-release-582-july-17-2025 · Note
• https://github.com/wolfSSL/wolfssl/pull/8736 · Note
• https://twitter.com/CVEnew/status/1946343153939718233 · Twitter Post
• https://twitter.com/wolfSSL/status/2014074366854607328 · Twitter Post
• https://twitter.com/dailycve/status/1996272946797572461 · Twitter Post
• https://t.me/cvetracker/28186 · Telegram Post
• https://t.me/cvenotify/129697 · Telegram Post