CVE-2025-49087

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.

Scoring

Severity

MEDIUM

CVSS base score

4

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS probability

0.40%

CWE

CWE-385

Published

2025-07-20

Last modified

2026-03-13

Affected products

• Mbed mbedtls

Weakness type

• CWE-385

Related vulnerabilities

• CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
• CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
• CVE-2026-6478 — PostgreSQL discloses MD5-hashed passwords via covert timing channel
• CVE-2026-5598 — Non-constant time comparisons risk private key leakage in FrodoKEM.
• CVE-2025-59425 — vLLM vulnerable to timing attack at bearer auth
• CVE-2025-9231 — Timing side-channel in SM2 algorithm on 64 bit ARM
• CVE-2025-59432 — Timing Attack Vulnerability in SCRAM Authentication
• CVE-2025-53826 — FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

Markdown version · Browse all CVEs