CVE-2025-66442 | BDVDB-2026-324042 Detail
Description#
In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-385 Covert Timing Channel
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.