CVE-2020-36424

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-203

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.gentoo.org/740108Issue Tracking, Patch, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00036.htmlMailing List, Third Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2Vendor Advisory
https://bugs.gentoo.org/740108Issue Tracking, Patch, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00036.htmlMailing List, Third Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2Vendor Advisory

Timeline

Published: Jul 19, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-364255.3An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate CVE-2020-364267.5An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).CVE-2020-364275.5GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.CVE-2020-364288.8matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data an CVE-2020-364295.5Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.CVE-2020-36435.5u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snap CVE-2020-364307.8libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong in CVE-2020-364315.5Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.CVE-2020-364329.8An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().CVE-2020-364337.5An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement.CVE-2020-364349.8An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.CVE-2020-364358.1An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks.