CVE-2025-59438
MEDIUMDescription
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.
Is your site exposed to CVE-2025-59438?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| arm | mbed_tls |
References
Frequently Asked Questions
What is CVE-2025-59438? +
How severe is CVE-2025-59438? +
What products are affected by CVE-2025-59438? +
How do I check if I'm vulnerable to CVE-2025-59438? +
Related Vulnerabilities
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated …
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
Tinyauth is an authentication and authorization server. Prior to 5.1.0, Tinyauth exposes a remotely observable timing difference between authentication attempts …
SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) …