Lucene search

K
osvGoogleOSV:CVE-2020-36422
HistoryJul 19, 2021 - 5:15 p.m.

CVE-2020-36422

2021-07-1917:15:11
Google
osv.dev
13
arm mbed tls
side channel
ecc
private key
recovery

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.5%

An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.5%