← voltar
CVE-2025-52496

CVE-2025-52496

CVSS 7.8 HIGHEPSS 0.2%CWE-733
Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
Mbed · mbedtls

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-1.mdhttps://lists.debian.org/debian-lts-announce/2025/08/msg00013.html