← All advisories

Unrated severityNVD Advisory· Published Oct 21, 2025· Updated Oct 21, 2025

CVE-2025-59438

CVE-2025-59438

Description

Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Mbed TLS/Mbed TLSdescription
Arm/MbedTLSllm-fuzzy
Range: <= 3.6.4
osv-coords12 versions
pkg:rpm/opensuse/mbedtls&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/micropython&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/micropython&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/ovmf&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/ovmf&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/vlang&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Micro%206.2
< 3.6.5-1.1+ 11 more
- (no CPE)range: < 3.6.5-1.1
- (no CPE)range: < 1.26.0-bp160.1.1
- (no CPE)range: < 1.26.0-2.1
- (no CPE)range: < 202502-160000.4.1
- (no CPE)range: < 202602-5.1
- (no CPE)range: < 0.5-2.1
- (no CPE)range: < 202408-150700.3.15.1
- (no CPE)range: < 202408-150700.3.15.1
- (no CPE)range: < 202502-160000.4.1
- (no CPE)range: < 202502-160000.4.1
- (no CPE)range: < 202402-slfo.1.1_2.1
- (no CPE)range: < 202502-160000.4.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.