VULNERABILITY INTELLIGENCE
CVE-2025-13912
EPSS probability0.15%
CISA KEVNot currently listed
Published2025-12-11
Last modified2026-10-14
Description
Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.
Weakness classification
- facts@wolfssl.com: CWE-203