{"id":"CVE-2025-59438","aliases":["ALPINE-CVE-2025-59438","DEBIAN-CVE-2025-59438","EUVD-2025-35171","GHSA-mqc9-9p37-h763","JLSEC-2025-233","ROOT-OS-DEBIAN-12-CVE-2025-59438","SUSE-SU-2026:1413-1","SUSE-SU-2026:20769-1","SUSE-SU-2026:21018-1","SUSE-SU-2026:21161-1","UBUNTU-CVE-2025-59438","openSUSE-SU-2025:15662-1","openSUSE-SU-2025:15747-1","openSUSE-SU-2025:20035-1","openSUSE-SU-2026:10083-1","openSUSE-SU-2026:10378-1","openSUSE-SU-2026:11790-1","openSUSE-SU-2026:20499-1","openSUSE-SU-2026:21144-1","openSUSE-SU-2026:21864-1"],"status":"published","title":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00264,"percentile":0.18337,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-208"],"published":"2025-10-21T00:00:00Z","modified":"2026-11-06T10:04:42Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls3","fixed_in":["3.6.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["3.6.5-0.1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["3.6.5-0.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"mbedtls","fixed_in":["2.28.3-1.root.io.14","2.28.3-1.root.io.15","2.28.3-1.root.io.16","2.28.3-1.root.io.13","2.28.3-1.aikido.17"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-mbedtls","fixed_in":["2.28.3-1.root.io.14","2.28.3-1.root.io.15","2.28.3-1.root.io.16","2.28.3-1.root.io.13","2.28.3-1.aikido.17"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"ovmf","fixed_in":["202408-150700.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"ovmf","fixed_in":["202408-150700.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"ovmf","fixed_in":["202402-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"ovmf","fixed_in":["202502-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ovmf","fixed_in":["202502-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ovmf","fixed_in":["202502-160000.4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"micropython","fixed_in":["1.26.0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"micropython","fixed_in":["1.26.0-bp160.1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"vlang","fixed_in":["0.5-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ovmf","fixed_in":["202602-5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"ovmf","fixed_in":["202502-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.4-1","2.28.5-1","2.28.6-1","2.28.7-1","2.28.7-1.1","2.28.7-1.1~exp1","2.28.8-1","3.6.0-1","3.6.0-2","3.6.0-3","3.6.2-1","3.6.2-2","3.6.2-3","3.6.3-1","3.6.4-1","3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.6-0.1~deb13u1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-0.1~deb13u1"}]}],"versions":["3.6.4-2"]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-0.1"}]}],"versions":["3.6.4-2","3.6.5-0.1~deb13u1"]},{"source":"osv","ecosystem":"Julia","package":"MbedTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1.root.io.14"},{"fixed":"2.28.3-1.root.io.15"},{"fixed":"2.28.3-1.root.io.16"},{"fixed":"2.28.3-1.root.io.13"},{"fixed":"2.28.3-1.aikido.17"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1.root.io.14"},{"fixed":"2.28.3-1.root.io.15"},{"fixed":"2.28.3-1.root.io.16"},{"fixed":"2.28.3-1.root.io.13"},{"fixed":"2.28.3-1.aikido.17"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202408-150700.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202408-150700.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202402-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202502-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202502-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202502-160000.4.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1","2.8.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2","2.16.4-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.6-1ubuntu1","2.28.7-1ubuntu1","2.28.7-1.1ubuntu1","2.28.8-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"micropython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"micropython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-bp160.1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202602-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202502-160000.4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-bp160.1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-bp160.2.1"}]}],"bundled":2}],"products":[{"vendor":"arm","product":"mbed_tls"}],"references":[{"url":"https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/","tags":["Vendor Advisory","advisory","web","report"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-invalid-padding-error/","tags":["Vendor Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59438","tags":["advisory"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-invalid-padding-error"},{"url":"https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories"},{"url":"https://github.com/advisories/GHSA-mqc9-9p37-h763"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-59438","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59438.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-59438","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261413-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252441","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59438","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620769-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621018-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621161-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-59438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59438","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52496","tags":["web"]},{"url":"https://bugzilla.suse.com/1231708","tags":["report"]},{"url":"https://bugzilla.suse.com/1240051","tags":["report"]},{"url":"https://bugzilla.suse.com/1240052","tags":["report"]},{"url":"https://bugzilla.suse.com/1245808","tags":["report"]},{"url":"https://bugzilla.suse.com/1245809","tags":["report"]},{"url":"https://bugzilla.suse.com/1245810","tags":["report"]},{"url":"https://bugzilla.suse.com/1245811","tags":["report"]},{"url":"https://bugzilla.suse.com/1246783","tags":["report"]},{"url":"https://bugzilla.suse.com/1246784","tags":["report"]},{"url":"https://bugzilla.suse.com/1246973","tags":["report"]},{"url":"https://bugzilla.suse.com/1252341","tags":["report"]},{"url":"https://bugzilla.suse.com/1252454","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25835","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2025-10-21T16:09:21.421Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-208"],"updated_at":"2026-11-02T14:32:47.812946Z"}],"euvd":[{"id":"EUVD-2025-35171","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2025-10-21T16:09:21Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:29.313974Z"}],"ghsa":[{"id":"GHSA-mqc9-9p37-h763","title":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T15:31:00Z","modified":"2025-10-21T18:31:37Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-208"],"updated_at":"2026-11-02T15:04:02.994181Z"}],"nvd":[{"id":"CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T15:15:39.103Z","modified":"2026-11-05T22:10:00.203Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-208"],"updated_at":"2026-11-05T23:57:15.690201Z"}],"osv":[{"id":"ALPINE-CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T15:15:39.103Z","modified":"2026-11-03T06:32:51.211503776Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2026-11-07T02:31:05.498859503Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T03:07:57.874008Z"},{"id":"DEBIAN-CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T15:15:39.103Z","modified":"2026-11-06T10:04:42.658857463Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"JLSEC-2025-233","title":"Padding oracle through timing of cipher error reporting","description":"## Vulnerability\n\nIn symmetric encryption modes that involve padding, if an attacker can submit ciphertexts for decryption and learn whether the padding is valid, this provides partial information about the plaintext. If the attacker can also submit input that the victim encrypts together with a secret, this can allow the attacker to recover the whole secret part. This is known as a padding oracle attack. The attacker may learn the validity of the padding directly or indirectly, for example through timing.\n\nIn the Mbed TLS legacy API (`mbedtls_cipher_crypt()`, `mbedtls_cipher_finish()`), the problematic modes are ECB and CBC with any padding other than `NONE`. In the PSA Crypto API (`psa_cipher_decrypt()`, `psa_cipher_finish()`), the problematic algorithm is `PSA_ALG_CBC_PKCS7`.\n\nMbed TLS takes care to check the padding in constant time inside the legacy cipher modules, so `mbedtls_cipher_crypt()` and `mbedtls_cipher_finish()` are not vulnerable. However, application code may be vulnerable if it handles errors from these functions in a way that is not constant-time.\n\nIn the PSA API, when the built-in implementation of CBC-PKCS7 is used, the PSA functions  (`psa_cipher_decrypt()`, `psa_cipher_finish()`) call `mbedtls_cipher_finish()` and translate its error codes into PSA error codes. This translation is not constant-time, and a local unprivileged attacker may be able to observe which error is raised by timing shared resources such as a code cache or a branch predictor.\n\nIn the PSA API, when using a driver, there is no error translation. However some code paths inside the library distinguish the error case from the success case, which allows the same attack.\n\n## Impact\n\nLocal attackers may be able to recover plaintexts encrypted with CBC-PKCS7 or other symmetric encryption mode using padding when it is decrypted through the PSA API.\n\nApplications using the legacy API to decrypt with padding may be affected through their own error handling.\n\n## Affected versions\n\nAll versions of Mbed TLS up to 3.6.4 are affected.\n\nTF-PSA-Crypto 1.0.0beta is also affected.\n\n## Work-around\n\nApplications are not affected if they only accept authenticated ciphertexts for CBC decryption, i.e. if they only use CBC as part of an encrypt-then-MAC construction. (Applications should use AEAD modes instead of CBC-based modes whenever possible.)\n\n## Resolution\n\nAffected users should upgrade to Mbed TLS 3.6.5 or TF-PSA-Crypto 1.0.0 or above.\n\nAdditionally, applications using `mbedtls_cipher_crypt()` or `mbedtls_cipher_finish()` with a CBC or EBC mode with padding should review their error handling, and should consider switching to the new function `mbedtls_cipher_finish_padded()` which simplifies the handling of invalid-padding conditions.\n\nApplications doing decryption with `PSA_ALG_CBC_PKCS7` should handle errors carefully if local timing attacks are a concern. (This also applies to asymmetric decryption with `PSA_ALG_RSA_PKCS1V15_CRYPT`.)","status":"published","published":"2025-11-21T15:59:04.054Z","modified":"2026-07-18T00:01:06.059953515Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"UBUNTU-CVE-2025-59438","description":"Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.","status":"published","published":"2025-10-21T15:15:00Z","modified":"2026-04-22T16:07:15.343529Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"openSUSE-SU-2025:15662-1","title":"micropython-1.26.0-2.1 on GA media","description":"These are all security issues fixed in the micropython-1.26.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-23T00:00:00Z","modified":"2026-03-23T04:54:04.052943Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15747-1","title":"libeverest-3.6.5-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-19T00:00:00Z","modified":"2026-03-23T04:54:09.919148Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20035-1","title":"Security update for micropython","description":"This update for micropython fixes the following issues:\n\nChanges in micropython:\n\n- Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438\n\nVersion 1.26.0:\n\n  * Added machine.I2CTarget for creating I2C target devices on multiple ports.\n  * New MCU support: STM32N6xx (800 MHz, ML accel) \u0026 ESP32-C2 (WiFi + BLE).\n  * Major float accuracy boost (~28% → ~98%), constant folding in compiler.\n  * Optimized native/Viper emitters; reduced heap use for slices.\n  * Time functions standardized (1970–2099); new boards across ESP32, SAMD, STM32, Zephyr.\n  * ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY.\n  * RP2: compressed errors, better lightsleep, hard IRQ timers.\n  * Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support.\n  * mpremote adds fs tree, improved df, portable config paths.\n  * Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests.\n","status":"published","published":"2025-11-10T15:52:16Z","modified":"2026-03-23T04:54:15.893339Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10083-1","title":"vlang-0.5-2.1 on GA media","description":"These are all security issues fixed in the vlang-0.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-22T00:00:00Z","modified":"2026-03-23T04:54:26.233617Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10378-1","title":"ovmf-202602-5.1 on GA media","description":"These are all security issues fixed in the ovmf-202602-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-17T00:00:00Z","modified":"2026-03-18T08:45:23.146994Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:11790-1","title":"libmbedcrypto7-2.28.10-5.1 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.28.10-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-15T00:00:00Z","modified":"2026-09-16T18:23:08.638351626Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:20499-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issue:\n\n- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).\n","status":"published","published":"2026-04-09T15:10:40Z","modified":"2026-04-22T18:25:49.622792Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21144-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\nChanges in mbedtls:\n\n- Update to 3.6.6 (LTS maintenance update from 3.6.1); security fixes\n  accumulated across the 3.6.2-3.6.6 releases:\n  * CVE-2024-49195 (boo#1231708): buffer underrun in pkwrite when\n    writing an opaque key pair\n  * CVE-2025-27809 (boo#1240051): certificate verification accepted\n    arbitrary hostnames\n  * CVE-2025-27810 (boo#1240052): possible authentication bypass on\n    failed memory allocation / hardware errors\n  * CVE-2025-47917 (boo#1246783): misleading memory management in\n    mbedtls_x509_string_to_names()\n  * CVE-2025-48965 (boo#1246784): NULL pointer dereference after\n    mbedtls_asn1_store_named_data()\n  * CVE-2025-49087 (boo#1246973): timing side channel in PKCS#7\n    padding removal\n  * CVE-2025-49600 (boo#1245808): unchecked return values in LMS\n    verification allow signature bypass via fault injection\n  * CVE-2025-49601 (boo#1245809): out-of-bounds read in\n    mbedtls_lms_import_public_key()\n  * CVE-2025-52496 (boo#1245810): race in AES-NI support detection can\n    lead to AES key extraction or GCM forgery\n  * CVE-2025-52497 (boo#1245811): one-byte heap underflow when parsing\n    PEM-encrypted material\n  * CVE-2025-54764 (boo#1252341): timing attacks in RSA operations\n  * CVE-2025-59438 (boo#1252454): padding-oracle attack via timing of\n    cipher error reporting\n  * CVE-2026-25833: PSA RNG state duplicated across fork()\n  * CVE-2026-25834: TLS 1.3 HelloRetryRequest man-in-the-middle\n    session-resumption downgrade\n  * CVE-2026-25835: RNG state duplicated when application/VM state is\n    cloned\n","status":"published","published":"2026-06-22T13:34:13Z","modified":"2026-06-30T18:24:45.186057867Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21864-1","title":"Security update for mbedtls-2","description":"This update for mbedtls-2 fixes the following issues:\n\nChanges in mbedtls-2:\n\n- CVE-2025-52496: race condition in AESNI support detection, AES key\n  disclosure / GCM forgery in multithreaded programs (boo#1245810)\n- CVE-2025-59438: padding oracle through timing of cipher error\n  reporting (boo#1252454)\n","status":"published","published":"2026-09-16T15:11:09Z","modified":"2026-09-17T18:23:15.811634995Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-59438","title":"CVE-2025-59438 in mbedtls - Patched by Root","description":"Root has patched CVE-2025-59438 in the mbedtls package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:15:34Z","modified":"2026-08-26T01:12:54.967787486Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"SUSE-SU-2026:1413-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issue:\n\n- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).\n","status":"published","published":"2026-04-16T13:34:00Z","modified":"2026-04-17T09:00:14.770608Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20769-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issue:\n\n- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).\n","status":"published","published":"2026-03-20T11:57:43Z","modified":"2026-03-25T17:33:48.725756Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21018-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issue:\n\n- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).\n","status":"published","published":"2026-04-09T15:10:40Z","modified":"2026-04-14T18:26:50.765642Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21161-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issue:\n\n- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).\n","status":"published","published":"2026-04-09T15:05:01Z","modified":"2026-04-22T18:25:24.600704Z","updated_at":"2026-11-02T15:54:02.312556Z"}]}}