CVE-2021-36647

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/ARMmbed/mbedtls/releases/Third Party Advisory
https://kouzili.com/Load-Step.pdfThird Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-07-1Vendor Advisory
https://github.com/ARMmbed/mbedtls/releases/Third Party Advisory
https://kouzili.com/Load-Step.pdfThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/06/msg00034.html
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-07-1Vendor Advisory

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-366545.4CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.CVE-2021-36669.8body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')CVE-2021-366657.8An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.CVE-2021-366667.8An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.CVE-2021-366677.8Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the l CVE-2021-366687.8URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron CVE-2021-36676.5An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath f CVE-2021-366865.4Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.CVE-2021-366895.5An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive i CVE-2021-36695.5A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which coul CVE-2021-366907.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a c CVE-2021-366917.5libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file usi