{"id":"CVE-2025-7396","summary":"Curve25519 Blinding","details":"In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.","modified":"2026-08-12T03:51:39.956400248Z","published":"2025-07-18T22:51:18.950Z","database_specific":{"cna_assigner":"wolfSSL","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7396.json","unresolved_ranges":[{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"5.8.0; 0"},{"last_affected":"5.8.0; 0"}]}]},"references":[{"type":"WEB","url":"https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#wolfssl-release-582-july-17-2025"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7396.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7396"},{"type":"PACKAGE","url":"https://github.com/wolfssl/wolfssl"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wolfssl/wolfssl","events":[{"introduced":"decea12e223869c8f8f3ab5a53dc90b69f436eb2"},{"last_affected":"decea12e223869c8f8f3ab5a53dc90b69f436eb2"}],"database_specific":{"extracted_events":[{"introduced":"5.8.2"},{"last_affected":"5.8.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:wolfssl:wolfssl:5.8.2:*:*:*:*:*:*:*"}}],"versions":["5.8.2","v5.8.2-stable"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7396.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N"}]}