CVE-2025-52496 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a mult…
High CVSS: 7.8

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.
Vendor
Arm
Product
Mbed Tls
CWE
CWE-733
Yayın Tarihi
2025-07-04 15:15:22
Güncelleme
2025-11-03 20:19:13
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-733 Mbed Tls HIGH Arm 2025

Referanslar

https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-1.md https://lists.debian.org/debian-lts-announce/2025/08/msg00013.html https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-1.md