AIKIDO-2026-996137
Mbed-TLS.mbedtls is vulnerable to Observable Timing Discrepancy
62
Medium Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
The modular inversion and GCD routines used by RSA in Mbed TLS are not constant time and leak timing information that depends on secret values. This makes RSA key generation, importing incomplete or non-standard RSA keys, and additional operations under certain build options vulnerable to local timing attacks. An attacker able to measure timing on the same machine can recover private key material. The fix makes the affected arithmetic routines run in constant time.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and an attacker can measure precise timing of RSA operations on the same host.
Background info
Mbed-TLS.mbedtls is vulnerable to Observable Timing Discrepancy in versions 1.0.0 - 3.6.4.
How to fix this
Upgrade the Mbed-TLS.mbedtls library to the patch version.
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant