CWE-385

liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)

open-quantum-safe · liboqs

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib · phpseclib

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

free5gc · free5gc

PostgreSQL discloses MD5-hashed passwords via covert timing channel

PostgreSQL

Non-constant time comparisons risk private key leakage in FrodoKEM.

Legion of the Bouncy Castle Inc. · BC-JAVA

A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to…

Product not named

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize…

Product not named

vLLM vulnerable to timing attack at bearer auth

vllm-project · vllm

Timing side-channel in SM2 algorithm on 64 bit ARM

OpenSSL · OpenSSL

Timing Attack Vulnerability in SCRAM Authentication

ongres · scram