CVE-2018-19608

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-05 · updated 2026-06-17
Weakness: CWE-269

Description

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.

Affected products

mbedtls: from 2.1.0 before 2.1.17; from 2.7.0 before 2.7.8 — fixed in 2.1.17, 2.7.8
TrustedFirmware Mbed TLS: from 2.14.0 before 2.14.1 — fixed in 2.14.1

How to fix

Upgrade to a fixed version: mbedtls 2.1.17, 2.7.8; TrustedFirmware Mbed TLS 2.14.1. Check the vendor advisory for mitigations.

References

http://cat.eyalro.net/
https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03
http://cat.eyalro.net/
https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03

Get alerted when CVE-2018-19608 or the next vulnerability affects your stack