CVE-2025-12888
Constant Time Issue with Xtensa-based ESP32 and X22519
Résumé
Constant Time Issue with Xtensa-based ESP32 and X22519
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of X25519, which is now turned on as the default for Xtensa.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-12888 wolfssl
- Ubuntu UBUNTU-CVE-2025-12888 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- web https