PT-2025-42819 · Mbed Tls+1 · Mbed Tls+1

Published 2025-10-20 · Updated 2025-11-19 · CVE-2025-54764

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.5

Description The software contains a flaw that could allow a local attacker to conduct a timing attack against specific RSA operations. Additionally, direct calls to the mbedtls mpi mod inv and mbedtls mpi gcd functions are susceptible to exploitation.

Recommendations Update to version 3.6.5 or later.

Fix

Weakness Enumeration

CWE-208

Related Identifiers

CVE-2025-54764

OPENSUSE-SU-2025:15747-1

Affected Products

Debian

Mbed Tls

References · 22

• https://osv.dev/vulnerability/openSUSE-SU-2025:15747-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54764 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-54764 · Vendor Advisory
• https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-54764 · Vendor Advisory
• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-54764 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54764 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-54764 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-54764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54764 · Security Note
• https://github.com/Mbed-TLS/mbedtls/compare/246d86b941ef2d2bdeabd7035efe7200bc609b91..a08faf90700e46f6aa2a6e3fee8a6a71ddb816ce · Note
• https://github.com/Mbed-TLS/mbedtls/compare/246d86b941ef2d2bdeabd7035efe7200bc609b91..30f073236922fe4e528fdf82eb442babb50516fa · Note
• https://github.com/Mbed-TLS/mbedtls/compare/8f4779c6fa40374f88404787bebad85cc7e9969b..eb346801263ba4612b5e29633bd55fe18943ca65 · Note
• https://github.com/Mbed-TLS/mbedtls/compare/9b54f934588bc373f3c3f5d45b5a3ad0ae003082..99270322ffac3546f813b1069fd6efb667cdce3f · Note