Vulnerability Database

299,030

Total vulnerabilities in the database

CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

  • Published: Oct 20, 2025
  • Updated: Nov 4, 2025
  • CVE: CVE-2025-54764
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.2
  • AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
arm / mbed_tls - 3.6.5