JLSEC-2025-221
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-221.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-221.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2025-221
- Upstream
- Published
- 2025-11-21T15:59:04.054Z
- Modified
- 2026-07-23T22:30:20.016143610Z
- Severity
-
- 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Use of a Broken or Risky Cryptographic Algorithm in the function `mbedtls_mpi_exp_mod()` in lignum.c...
- Details
-
Use of a Broken or Risky Cryptographic Algorithm in the function
mbedtls_mpi_exp_mod()in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA. - Database specific
{ "license": "CC-BY-4.0", "sources": [ { "id": "CVE-2021-36647", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36647", "modified": "2026-06-17T03:58:59.387Z", "imported": "2026-07-17T20:46:37.922Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-36647", "database_specific": { "status": "Modified" }, "published": "2023-01-17T21:15:10.880Z" } ] }- References