Local Timing Attack Vulnerability in Mbed TLS by ARM

CVE-2025-54764

What is CVE-2025-54764?

A vulnerability in Mbed TLS prior to version 3.6.5 exposes certain RSA operations to local timing attacks, allowing attackers to potentially gain sensitive information through timing analysis. The affected functions, mbedtls_mpi_mod_inv and mbedtls_mpi_gcd, can be exploited if not properly mitigated, thus compromising the security of cryptographic operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References