| Package | Affected versions | Patched versions |
|---|---|---|
| mbed crypto | < 3.1.0 | 3.1.0 |
| mbed tls | < 2.16.5 | 2.16.5 |
Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free