A vulnerability described as problematic has been identified in mbed TLS up to 4.0.0 . This affects an unknown function of the component RSA/CBC/ECB . Such manipulation leads to covert timing channel. This vulnerability is listed as CVE-2025-66442 . The attack may be performed from remote. There is no available exploit.
| Vendor | Product | Versions |
|---|---|---|
| mbed TLS | n/a | n/a, up to 4.0.0 |
Updated description, vendor, product, affected versions, and exploit availability based on the new article.
Initial creation
