CVE-2025-49087 Information disclosure in mbedtls

What is CVE-2025-49087?

CVE-2025-49087 is a medium-severity vulnerability in mbedtls, published on 20 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.

Weakness: CWE-385

Which versions are affected by CVE-2025-49087?

It affects 1 product.

Products include Trustedfirmware Mbed Tls.

How do I fix CVE-2025-49087?

Upgrade to a fixed version.

Is CVE-2025-49087 being exploited?

There is no known exploitation of CVE-2025-49087 in the wild and no public exploit code.

Other vulnerabilities in mbedtls

• CVE-2026-34875 Memory corruption in n/a Critical 9.8
• CVE-2024-49195 Memory corruption in n/a Critical 9.8
• CVE-2024-45158 Memory corruption in n/a Critical 9.8
• CVE-2024-45159 Auth bypass in n/a Critical 9.8
• CVE-2023-45199 Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution. Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2025-49087, DEBIAN-CVE-2025-49087, GHSA-fmjv-q9m9-j657, UBUNTU-CVE-2025-49087.