CVE-2025-54764 | Mbed TLS up to 3.6.4 RSA mbedtls_mpi_mod_inv/mbedtls_mpi_gcd timing discrepancy

A vulnerability was found in Mbed TLS up to 3.6.4. It has been declared as problematic. This impacts the function mbedtls_mpi_mod_inv/mbedtls_mpi_gcd of the component RSA Handler. The manipulation results in observable timing discrepancy.

This vulnerability was named CVE-2025-54764. The attack needs to be approached locally. There is no available exploit.

It is recommended to upgrade the affected component.