CVE-2025-49087 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 paddi…
Medium CVSS: 4.0

CVE-2025-49087

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
Vendor
Arm
Product
Mbed Tls
CWE
CWE-385
Yayın Tarihi
2025-07-20 19:15:24
Güncelleme
2025-08-07 01:21:40
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-385 Mbed Tls MEDIUM Arm 2025

Referanslar

https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-5.md https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/