CVE-2025-7396

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-7396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-7396
Downstream
Published
2025-07-18T22:51:18.950Z
Modified
2026-07-16T03:48:07.737208685Z
Severity
  • 5.6 (Medium) CVSS_V4 - CVSS:4.0/AV:P/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
Curve25519 Blinding
Details

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7396.json",
    "cna_assigner": "wolfSSL",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.8.0; 0"
                },
                {
                    "last_affected": "5.8.0; 0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/wolfssl/wolfssl

Affected ranges

Type
GIT
Repo
https://github.com/wolfssl/wolfssl
Events
Introduced
decea12e223869c8f8f3ab5a53dc90b69f436eb2
Last affected
decea12e223869c8f8f3ab5a53dc90b69f436eb2
Database specific 
{
    "cpe": "cpe:2.3:a:wolfssl:wolfssl:5.8.2:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.8.2"
        },
        {
            "last_affected": "5.8.2"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*
5.8.2
v5.*
v5.8.2-stable

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7396.json"