MB
Product
mbedtls
by Mbed · last CVE Jul 20, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 6Low 1
Watch

Add mbedtls to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-49087
3.7
0%
Jul 20
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used
Affected: 3.6.1 before 3.6.4
Showing 1