CVE-2025-7396
Curve25519 Blinding
- State
- Published
- Severity
- 5.6 Medium
- Published
- Jul 18, 2025
- Updated
- Jul 21, 2025
- Reserved
- Jul 9, 2025
Description
In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.6 Medium | CVSS:4.0/AV:P/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N | wolfSSL |
Weaknesses
- CWE-385 Covert Timing Channel
Affected Products
| Product | Versions |
|---|---|
wolfSSLwolfSSL |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.