A vulnerability described as problematic has been identified in mbed TLS up to 4.0.0. This affects an unknown function of the component RSA/CBC/ECB. Such manipulation leads to covert timing channel.
This vulnerability is listed as CVE-2025-66442. The attack may be performed from remote. There is no available exploit.
