JLSEC-2025-221
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-221.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-221.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2025-221
- Upstream
- Published
- 2025-11-21T15:59:04.054Z
- Modified
- 2025-11-21T16:20:56.930878Z
- Summary
- Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c i...
- Details
-
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.
- Database specific
{ "sources": [ { "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-36647", "published": "2023-01-17T21:15:10.880Z", "id": "CVE-2021-36647", "imported": "2025-11-20T23:04:02.205Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36647", "modified": "2025-11-03T20:15:49.343Z" } ], "license": "CC-BY-4.0" }- References